Static task
static1
Behavioral task
behavioral1
Sample
6d866d25e327d9dc4156a15197d052c80c58be01eee1f4eca5d587853c04ff19.exe
Resource
win10v2004-20240419-en
General
-
Target
6d866d25e327d9dc4156a15197d052c80c58be01eee1f4eca5d587853c04ff19
-
Size
2.3MB
-
MD5
42f2adb4fbdf9d71558839c2c429190e
-
SHA1
e3d9b36aef21c9370d21b66914c15309951b992f
-
SHA256
6d866d25e327d9dc4156a15197d052c80c58be01eee1f4eca5d587853c04ff19
-
SHA512
3c0898b1bc9221a0a79ab76c9967d8cb0293040a133a1ffb5358fc3ec4ee4159a1c1df3ad1827e9f60c802fe742413c8fdc3f4f171794b32b3d8b198d7694674
-
SSDEEP
49152:EGY5918NqwTEgTcQd8g6UHpCwhbiD1sw8svwqDQfiHCmK2o8pVZ5kC:thTPNUwheB38AwqGZmFo8pnx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6d866d25e327d9dc4156a15197d052c80c58be01eee1f4eca5d587853c04ff19
Files
-
6d866d25e327d9dc4156a15197d052c80c58be01eee1f4eca5d587853c04ff19.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vurxwsnl Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
balvynud Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE