Static task
static1
Behavioral task
behavioral1
Sample
6866e926ac8f7d6414932c8af2935c40ac91056e8a95057bcbc980dfd1d92d15.exe
Resource
win10v2004-20240426-en
General
-
Target
6866e926ac8f7d6414932c8af2935c40ac91056e8a95057bcbc980dfd1d92d15
-
Size
2.3MB
-
MD5
18e7c243a14574b008b7fb582a6d059c
-
SHA1
a722aa0ae18c2285061f59aca9392f421d18aca4
-
SHA256
6866e926ac8f7d6414932c8af2935c40ac91056e8a95057bcbc980dfd1d92d15
-
SHA512
d1d28f9ca04363614c9f94d442fc89a74795e45b98b3d8c8c21f1cddffb51481bf1161cb77e105fdb86c982750a09cd5f3c5ba97dd18da2c0e12d22a519982db
-
SSDEEP
49152:nkmKhyq24kI3qebVarbVQ18nnQkz9EsIAN11xG/HhDxXmYGY4m:nkmKEqlkAbkrLnTusIANz8ZdN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6866e926ac8f7d6414932c8af2935c40ac91056e8a95057bcbc980dfd1d92d15
Files
-
6866e926ac8f7d6414932c8af2935c40ac91056e8a95057bcbc980dfd1d92d15.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rhrwtgux Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
duqmxhwt Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE