Static task
static1
General
-
Target
441adf73dcc0324843d1e42824e7e9473960c859c748a87ac7af4460535aaf2f
-
Size
2.9MB
-
MD5
6afd3b5b7effe4bb0500fe08dd1f6ed7
-
SHA1
c0b8d6e8b660aa79851bd237c162ed437d3c047c
-
SHA256
441adf73dcc0324843d1e42824e7e9473960c859c748a87ac7af4460535aaf2f
-
SHA512
da0d387d54151a95993cf4f2af96202d68403e09bd338a3182108ec3150fd06bd565a1be1af82481acc6bded5d8e4df05e029ee89622e410e52e3ccf611c96d6
-
SSDEEP
49152:uSB7N+K2oIqvjWi3wkCL2SnvSiGQbiF31ZPGSus4Fmh:jB7N+K2oIqn3jCqGSHmiF31dGSJaC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 441adf73dcc0324843d1e42824e7e9473960c859c748a87ac7af4460535aaf2f
Files
-
441adf73dcc0324843d1e42824e7e9473960c859c748a87ac7af4460535aaf2f.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 186KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qatcqnjl Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zabsvnpb Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE