Static task
static1
Behavioral task
behavioral1
Sample
6dd3d6081f01c1fb88b36ecd336005ab3571876be404efe416a7248866868191.exe
Resource
win7-20240704-en
General
-
Target
6dd3d6081f01c1fb88b36ecd336005ab3571876be404efe416a7248866868191.exe
-
Size
1.8MB
-
MD5
6f59ce88b52487bba7eb59e81525c4f5
-
SHA1
83bb1abc3bd3b56bec0a68d6cd0df63bcf975ad6
-
SHA256
6dd3d6081f01c1fb88b36ecd336005ab3571876be404efe416a7248866868191
-
SHA512
985853c822cd92ee4a1f2a04eb63ee4e6692f23144683cf40e5a402e7a81b951acb1d489c0e5292c0b78aab99787f89dabcaec5b25975f706f52c01601293860
-
SSDEEP
49152:k7FXgGgW5JEKR/99GAdrdKZWILQ5qDjVN:kXQWkK9HFYpQ5qD/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6dd3d6081f01c1fb88b36ecd336005ab3571876be404efe416a7248866868191.exe
Files
-
6dd3d6081f01c1fb88b36ecd336005ab3571876be404efe416a7248866868191.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lddzjshm Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ytmlykrz Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE