Start
Static task
static1
Behavioral task
behavioral1
Sample
6386fa7fe35df58f487339a2c01b47754b50a8b184a360626e97e812eb59f41e.exe
Resource
win10v2004-20240226-en
General
-
Target
6386fa7fe35df58f487339a2c01b47754b50a8b184a360626e97e812eb59f41e
-
Size
2.2MB
-
MD5
ea61b112dc6d5fe08822eae6956bb926
-
SHA1
d3689afec53c6264c7242f761e000dcd0c81c8aa
-
SHA256
6386fa7fe35df58f487339a2c01b47754b50a8b184a360626e97e812eb59f41e
-
SHA512
4844a2b70786f16a93746f922a9ed28d5ab1c4996e423a610cf6e0ba1a605a86bdbde5c390284921c95cd81513d31c2425c1962c6df5cf225c40e75aaced1ff9
-
SSDEEP
49152:fs9NRR5MmyC8ZCRv5rEMTIEW2uSquOnVfqbx9hv2EOl:fQNRGEMUeuOVGx7eEO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6386fa7fe35df58f487339a2c01b47754b50a8b184a360626e97e812eb59f41e
Files
-
6386fa7fe35df58f487339a2c01b47754b50a8b184a360626e97e812eb59f41e.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Exports
Exports
Sections
Size: 591KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fnligtxt Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nrrjbwrd Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE