Static task
static1
Behavioral task
behavioral1
Sample
06e99c83e72b2559e6e7e10abde727233c822692310acb917907b44411ce423a.exe
Resource
win10v2004-20240226-en
General
-
Target
06e99c83e72b2559e6e7e10abde727233c822692310acb917907b44411ce423a
-
Size
1.8MB
-
MD5
c4ef5a2aea7d5442af06be6d71fa0cab
-
SHA1
7cc97d1546f32fdd18dde218cc57bf9afa5f19cc
-
SHA256
06e99c83e72b2559e6e7e10abde727233c822692310acb917907b44411ce423a
-
SHA512
7aecd82b591869442b673d50c366f09557add356241e53abc1c4d4a079f0ed57329067f126607a3bf99ca12ec4fe8309e595142f5ea12b55e64a7566b8a456ff
-
SSDEEP
49152:TZ+BAlW6dOC6JySExkK9hXZRtklXV5NI0LYa/FSD6:NIeW6crPEKopvUjNxz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06e99c83e72b2559e6e7e10abde727233c822692310acb917907b44411ce423a
Files
-
06e99c83e72b2559e6e7e10abde727233c822692310acb917907b44411ce423a.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wlluyjuu Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
todjovyh Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE