Static task
static1
Behavioral task
behavioral1
Sample
6b98a561418453b339beb5cece9645223218be0dea1eebaf789e472e8d1b8fed.exe
Resource
win10v2004-20240426-en
General
-
Target
6b98a561418453b339beb5cece9645223218be0dea1eebaf789e472e8d1b8fed
-
Size
2.3MB
-
MD5
d46530ac5bc3a8e3f2ce3336509a450c
-
SHA1
c593f90dcaf5d192c99476a803c99ccd3e96c235
-
SHA256
6b98a561418453b339beb5cece9645223218be0dea1eebaf789e472e8d1b8fed
-
SHA512
1ca0d0a8b52702bf51766d080769fb33725d22479b104e71f63cfb53be427a73c36fd0d19db23ea135b398f7acd9301a64db663a8405ab19c4e74660734073a1
-
SSDEEP
49152:KGY5918NqwTEgTcQOQn2EquLL8Ay4ZtZ6F1N08lt3GG1Fi0Tieq:rhTPOk2Tu/Y4h6F1blviO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b98a561418453b339beb5cece9645223218be0dea1eebaf789e472e8d1b8fed
Files
-
6b98a561418453b339beb5cece9645223218be0dea1eebaf789e472e8d1b8fed.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 680KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jrzcrlem Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jtsyksrr Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE