Static task
static1
Behavioral task
behavioral1
Sample
2b6c606a88c3c7c3d9ced145f43d864dfd307e35da5bc61792c183d54fba29ec.exe
Resource
win7-20240508-en
General
-
Target
2b6c606a88c3c7c3d9ced145f43d864dfd307e35da5bc61792c183d54fba29ec
-
Size
1.8MB
-
MD5
97aca3e79ee54a3eff17a8ed25bc037d
-
SHA1
9a835971559040f587d8697379fd1e2396c7a3a8
-
SHA256
2b6c606a88c3c7c3d9ced145f43d864dfd307e35da5bc61792c183d54fba29ec
-
SHA512
7ffa1f7e657816c4fc2ca82a6cb149a5ad7e0a1f79ace3814d1deace6152fb5235f866f984a290ce3bf2865574e09d5a966b2e834e34c81d55eb2c7d6c3f62e7
-
SSDEEP
49152:HuBpoyH1HL/3TML6pbSmocg/Ety6ZCh8Dx3O46eaPPX0fTQd:HuTSwolAVtV3cMfUd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2b6c606a88c3c7c3d9ced145f43d864dfd307e35da5bc61792c183d54fba29ec
Files
-
2b6c606a88c3c7c3d9ced145f43d864dfd307e35da5bc61792c183d54fba29ec.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zbynvgbn Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xwfzqjzp Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE