Static task
static1
Behavioral task
behavioral1
Sample
6ec6f705d368ed14b42e08a6a9a7a571b8d49ba5f0ed3b429b43a6a3a37eccfe.exe
Resource
win7-20240704-en
General
-
Target
6ec6f705d368ed14b42e08a6a9a7a571b8d49ba5f0ed3b429b43a6a3a37eccfe
-
Size
1.8MB
-
MD5
007da58cf10f5397ad8375b1f47632b0
-
SHA1
43a970ed6cd58113c38743d8ede91b0c1f740f63
-
SHA256
6ec6f705d368ed14b42e08a6a9a7a571b8d49ba5f0ed3b429b43a6a3a37eccfe
-
SHA512
e7186b93dd95424003c92f6b36d772f5e5577f452c41a78d9090e0034d4a93f4912cda264e5f6e8b806fd7c1d065d4babaeb5f25438312c9ee355203fb218d7e
-
SSDEEP
49152:UEmIzqFhwtjQ2LfETamvNKF0dqWQBtEO7HUstm2gffsO:4QWijnwRo6Q/U60kkffl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ec6f705d368ed14b42e08a6a9a7a571b8d49ba5f0ed3b429b43a6a3a37eccfe
Files
-
6ec6f705d368ed14b42e08a6a9a7a571b8d49ba5f0ed3b429b43a6a3a37eccfe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
blrnrcks Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hrfutkba Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE