Static task
static1
Behavioral task
behavioral1
Sample
b6491a7ae09e34061861082253113bea087f23b05f109d59638d79a64be5f93a.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
b6491a7ae09e34061861082253113bea087f23b05f109d59638d79a64be5f93a.exe
Resource
win11-20240508-en
General
-
Target
b6491a7ae09e34061861082253113bea087f23b05f109d59638d79a64be5f93a
-
Size
2.3MB
-
MD5
e452dc3fcf18169614f2a672ddbf4168
-
SHA1
72a6d4e5b5804dd62cea87805ecc8ad21faeaa02
-
SHA256
b6491a7ae09e34061861082253113bea087f23b05f109d59638d79a64be5f93a
-
SHA512
c34cd2149f93c106ea4d2141c54c5efd05776ac32ee09a34f90fda59f87e4782836f3269c0da68e571eeccbf7ecfd719b0086d4fa4a53dbb8189e6aa915ef3c4
-
SSDEEP
49152:MZWLnyAFIFhqjqxxkemYH1Y3rbzjzxiQ9KkQfMHk+8yGGz7:MZGnZWhYqxxkQEPdiQ9K/MEmGGz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6491a7ae09e34061861082253113bea087f23b05f109d59638d79a64be5f93a
Files
-
b6491a7ae09e34061861082253113bea087f23b05f109d59638d79a64be5f93a.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ullgvhyg Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ueohxzor Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE