Static task
static1
Behavioral task
behavioral1
Sample
6b9b8029a6e5a5a1ee84f4a394b3420f80b389242667636739a4c05e45f45d94.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral2
Sample
6b9b8029a6e5a5a1ee84f4a394b3420f80b389242667636739a4c05e45f45d94.exe
Resource
win11-20240419-en
General
-
Target
6b9b8029a6e5a5a1ee84f4a394b3420f80b389242667636739a4c05e45f45d94
-
Size
1.8MB
-
MD5
32a34a91e20de80fa8f5f1aa2a2c6e5f
-
SHA1
00141bf0973be2d68548fe42b265b76e8645087e
-
SHA256
6b9b8029a6e5a5a1ee84f4a394b3420f80b389242667636739a4c05e45f45d94
-
SHA512
4ae4b72f92d029597e8b5275ad83cf07e9f12560f1371ec5c5e211604963a36c777d82d5987e36c4d11dc52c468d8d63bc79a9473dca9d4d289f112eb836a210
-
SSDEEP
24576:sVjuPtB6gMd93SjehxdHvBbSREF/bDcnnlDlfFKox1CZhIEAsXvx6Vkc6Fusa3Dh:QSvW93ScVjDwl3rC0RsXvQVkc6Fubss
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b9b8029a6e5a5a1ee84f4a394b3420f80b389242667636739a4c05e45f45d94
Files
-
6b9b8029a6e5a5a1ee84f4a394b3420f80b389242667636739a4c05e45f45d94.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qvkfhpbi Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mjdvqwmv Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE