Static task
static1
General
-
Target
94e5b6b12ad848f176132a7c76940c0ee25c760ff1e6c50636eb39a0195609f0
-
Size
1.8MB
-
MD5
e175f0450bedda39be28a6e1cbee7a9c
-
SHA1
0edd4a5aeb866746bcadfee878f8b62168a90c23
-
SHA256
94e5b6b12ad848f176132a7c76940c0ee25c760ff1e6c50636eb39a0195609f0
-
SHA512
ce4c2eeaf5696bdd089efdbfea0f7d910c85b42ac22254696106493a49537e59ac3095564b1fd939598a933a0cd329a615a080f3ded86a20d1d057c50e2b651d
-
SSDEEP
49152:ve4B3NkV+Q/U+GiTEvrysfGZMdX5DH4ArRvzfMDLhL42:w+p+GiT6ryM3JDH1Rq9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94e5b6b12ad848f176132a7c76940c0ee25c760ff1e6c50636eb39a0195609f0
Files
-
94e5b6b12ad848f176132a7c76940c0ee25c760ff1e6c50636eb39a0195609f0.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xrrwzhvc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oksezljy Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE