Static task
static1
Behavioral task
behavioral1
Sample
6c1972f05c3758c9c834c85ebee405eb01ce0982d3df004018f3d6fe19a9d6f1.exe
Resource
win10v2004-20240226-en
General
-
Target
6c1972f05c3758c9c834c85ebee405eb01ce0982d3df004018f3d6fe19a9d6f1
-
Size
1.8MB
-
MD5
c368d0bc5c1a6da2aad3829fca6f8d84
-
SHA1
960dc26fcc71356feaabac117f74b401333cd13d
-
SHA256
6c1972f05c3758c9c834c85ebee405eb01ce0982d3df004018f3d6fe19a9d6f1
-
SHA512
098b4d8bbfa916b1c29084cb058ab1b37c7f2e4a9acec1b9bc6ab23ad46fcef980a3067a1b3b9ee279e8e8a76105e37b5eff738bcf41a1b9a7dc1a09dea4b861
-
SSDEEP
49152:EbCqz1lgUUtFwlxlkntO1lHqimvuUF5rr67ivW2GibVnv+d2vyEqzTdU:EHhY/nM1qlu4SxGwGXq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c1972f05c3758c9c834c85ebee405eb01ce0982d3df004018f3d6fe19a9d6f1
Files
-
6c1972f05c3758c9c834c85ebee405eb01ce0982d3df004018f3d6fe19a9d6f1.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lvlfrwvs Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
miqkxunj Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE