Static task
static1
Behavioral task
behavioral1
Sample
0c06b3f49e17c1536db26c16bea62d6bb4124f792ca627cfdec2aaab48ae74ff.exe
Resource
win10v2004-20240611-en
General
-
Target
0c06b3f49e17c1536db26c16bea62d6bb4124f792ca627cfdec2aaab48ae74ff
-
Size
2.3MB
-
MD5
54b62d75c6ff1145f8a42646e7912e76
-
SHA1
625966f468f9d02b27d1e7b1b04b3adaa83a9502
-
SHA256
0c06b3f49e17c1536db26c16bea62d6bb4124f792ca627cfdec2aaab48ae74ff
-
SHA512
2f010044108d9a558e9e69deba57209a3f93fce9bde4ac9242e09e242fa0c9d5cdda925a5590c5778f20dd3acd142c3d60883c7b220ac2168febec7d00a0da09
-
SSDEEP
49152:NUeBYrA+Po+FUgJ7op/lzk0E5Qu8KF5Qp9av90MrcWf8eykRoL:imt0UgOp/lzo5Qu8KF5Qp9+9PrTWL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c06b3f49e17c1536db26c16bea62d6bb4124f792ca627cfdec2aaab48ae74ff
Files
-
0c06b3f49e17c1536db26c16bea62d6bb4124f792ca627cfdec2aaab48ae74ff.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qqzlgyff Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nypbtjom Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE