Static task
static1
General
-
Target
b6d3a9ceb1858fbf82367fa0b0f373699c70e90d0e187eb1d017e8bd1664423e
-
Size
1.8MB
-
MD5
dfa9c6b59050b638f4ca980f2e75f2c2
-
SHA1
053bfba48663bc60f2677a30c52b390e15ca236d
-
SHA256
b6d3a9ceb1858fbf82367fa0b0f373699c70e90d0e187eb1d017e8bd1664423e
-
SHA512
aa1c84640efbcbce83e3b3df0b786248de04c3a33c7074ec227ec4f16064f85e9267b4b6e12036bc2558b03b45ecc5f32602cb0f579edabe456383aebb525c94
-
SSDEEP
49152:p8nHGd8L6+GGT17pUkAc+PX/2JIbJN4ie8CTpL4nK6p:qmZ+3Rqbc+2Yiie8CtEnK6p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource b6d3a9ceb1858fbf82367fa0b0f373699c70e90d0e187eb1d017e8bd1664423e
Files
-
b6d3a9ceb1858fbf82367fa0b0f373699c70e90d0e187eb1d017e8bd1664423e.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kgripxnw Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hfrnxcqk Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE