Static task
static1
General
-
Target
0dffe125c6320192561d755858f9f507b329941116dea15726adc14d5c0c0b40
-
Size
1.8MB
-
MD5
8023861f7907b1fd5d73256fcee77243
-
SHA1
924aa324dc691d1da2efa6a0333235e4f53d19b3
-
SHA256
0dffe125c6320192561d755858f9f507b329941116dea15726adc14d5c0c0b40
-
SHA512
2a573e29d095df5eeb530ea0bface98179a40383eec8b471f33a48eece0dcf122c7de6b9babd604d61f36a6f79293847121ec946bc1213df31db00ae0fd5bf74
-
SSDEEP
49152:ZXrurhX703oZK8b5B6IQSHXA1DDQJNhftevNw:ZXrurhX70YZj6IQSHXA2hfG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dffe125c6320192561d755858f9f507b329941116dea15726adc14d5c0c0b40
Files
-
0dffe125c6320192561d755858f9f507b329941116dea15726adc14d5c0c0b40.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rkttwucc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uewsnrxq Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE