Static task
static1
General
-
Target
090581cfb69da3d7b0263663e54fb3a3b0e8446f5beb5e0d32ddb196d602597d
-
Size
1.9MB
-
MD5
0858012889cc9c0b0f5e1d0fd31568e5
-
SHA1
c89075b32c2bf1f46321d3b46ef8144e498514fb
-
SHA256
090581cfb69da3d7b0263663e54fb3a3b0e8446f5beb5e0d32ddb196d602597d
-
SHA512
1ce9c01465d0810b82d728db16a19c887ed8db801e7e16d033cdaa40b1fab72ffa7aab3008dd4da9c914c5a7c340ab899b1791ced098ac9ae0d3854ceeec03d4
-
SSDEEP
49152:IM6bS9rydrVVeuafPMUzEM7fPh7yObhwnFfaJLWXNHHrn:P6eNyd5MuafeIbbywMpL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 090581cfb69da3d7b0263663e54fb3a3b0e8446f5beb5e0d32ddb196d602597d
Files
-
090581cfb69da3d7b0263663e54fb3a3b0e8446f5beb5e0d32ddb196d602597d.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 186KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gthttanu Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vbqphcat Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE