Static task
static1
Behavioral task
behavioral1
Sample
6a8ca5d1f3da611072594be9b5265948.exe
Resource
win7-20240215-en
General
-
Target
6a8ca5d1f3da611072594be9b5265948.exe
-
Size
2.3MB
-
MD5
6a8ca5d1f3da611072594be9b5265948
-
SHA1
12779d6596384eeef5702e34e5af0573502a8898
-
SHA256
1382e72f7291c833c917eb25d447bef158bd9dd30738265a117ce6616516b05d
-
SHA512
ee4d3a8368fe9f0fb9030628528db5b13ee7ed0d9831714e5fcf7489507f4e2a3d83edd03a217a94ebc288a75f952cd2aadfcdcf5fae7998453c4740977b934e
-
SSDEEP
49152:1Ts9zpYo556eURBC/k1wN2365XUIoxcf2XMx9o4OoeBz/5W1HGf:149SoqrRBCf23QkIfou9CXBzQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a8ca5d1f3da611072594be9b5265948.exe
Files
-
6a8ca5d1f3da611072594be9b5265948.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
awlllobu Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pdqtktsa Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE