Static task
static1
Behavioral task
behavioral1
Sample
b6902854f5a5217378a0bcc1c54fd8eee408e625444898a289f9f8f6a23f8df4.exe
Resource
win10v2004-20240419-en
General
-
Target
b6902854f5a5217378a0bcc1c54fd8eee408e625444898a289f9f8f6a23f8df4
-
Size
1.8MB
-
MD5
139c0d3d90fe9724ac1f99d1b491595b
-
SHA1
0ca7aafc600b232f852d3a0694a0f9cbc51bc3d5
-
SHA256
b6902854f5a5217378a0bcc1c54fd8eee408e625444898a289f9f8f6a23f8df4
-
SHA512
01ccc897a0678351d433c0abf06f814be2ce8542ce1e8bb11f6b702bca3b50864db7e0f741b7a69d88e619fb9909e2b9a56609b305a33e65da6434b07f52faab
-
SSDEEP
49152:82LK8u9qTYX4SGfBe3EdBS//2RDRMcoeS:82urKpBkEdc//0o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6902854f5a5217378a0bcc1c54fd8eee408e625444898a289f9f8f6a23f8df4
Files
-
b6902854f5a5217378a0bcc1c54fd8eee408e625444898a289f9f8f6a23f8df4.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 186KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sajgcwwr Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hdgtzygp Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE