Static task
static1
Behavioral task
behavioral1
Sample
aa6c1a1a2d25459e736cd4121b7418d40b9235c8ef7386e5129b1d6918185ae7.exe
Resource
win10v2004-20240226-en
General
-
Target
aa6c1a1a2d25459e736cd4121b7418d40b9235c8ef7386e5129b1d6918185ae7
-
Size
2.3MB
-
MD5
7df8e58107cd792433c4f06618461ad9
-
SHA1
379cbc1af2bd2f048b8f59fcc42f9bd06040ed0d
-
SHA256
aa6c1a1a2d25459e736cd4121b7418d40b9235c8ef7386e5129b1d6918185ae7
-
SHA512
50c68057762674c06f6f13379fe786615c0e68e57f74e45497be0238dac269fdf3de9d325f74517f3aab861bdf612234eba25852c1df35da4ac4afa23100a0ba
-
SSDEEP
49152:rtoxB0+H9b9EhLyubmRedT+j/7TdXzQS/pDCFZCF5uBlLXlUQ28QQ:ZovHWheubDT+rfZzQS/pGFkIr28Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa6c1a1a2d25459e736cd4121b7418d40b9235c8ef7386e5129b1d6918185ae7
Files
-
aa6c1a1a2d25459e736cd4121b7418d40b9235c8ef7386e5129b1d6918185ae7.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vmzzmglo Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xfgsdzjo Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE