Static task
static1
Behavioral task
behavioral1
Sample
b6f2227a24224f6f655f5f28dfa98677106f6029fd84a5f0bd0c5cf64c868de2.exe
Resource
win10v2004-20240426-en
General
-
Target
b6f2227a24224f6f655f5f28dfa98677106f6029fd84a5f0bd0c5cf64c868de2
-
Size
2.3MB
-
MD5
9462fe5e166d3b25cb668a4fbc7f7e5b
-
SHA1
d9ba8219c0b769d0b3169c2d8fc6a03cc249e84f
-
SHA256
b6f2227a24224f6f655f5f28dfa98677106f6029fd84a5f0bd0c5cf64c868de2
-
SHA512
8d758239ee9575321c63ac7c9d5a18f1334afa8b059d2dec5c0f80e57e1b15b462b15aba1580aa2a309c63e53b72449b5cab3e03608754cc907d564bc45da54b
-
SSDEEP
49152:HkmKhyq24kI3qebVsQG0IEni3XQP/eLBzkVRxgN:HkmKEqlkAbmPfE6XQJUN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource b6f2227a24224f6f655f5f28dfa98677106f6029fd84a5f0bd0c5cf64c868de2
Files
-
b6f2227a24224f6f655f5f28dfa98677106f6029fd84a5f0bd0c5cf64c868de2.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aekocikj Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vaijuksh Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE