Static task
static1
Behavioral task
behavioral1
Sample
6dda9365e6bd5b46bd9fe9e71f4a1b56d08a203fae39f5194cf88a9f56b98385.exe
Resource
win7-20240903-en
General
-
Target
6dda9365e6bd5b46bd9fe9e71f4a1b56d08a203fae39f5194cf88a9f56b98385
-
Size
1.8MB
-
MD5
0993a272e9ac14ec989a0584d65e6c42
-
SHA1
bc8cdb4f0425b65bc30f35f4b50dbb5b918d5e03
-
SHA256
6dda9365e6bd5b46bd9fe9e71f4a1b56d08a203fae39f5194cf88a9f56b98385
-
SHA512
4b2f28d9873bfc4ed996a3512409cc450b66c5904f35feaa8f019c3ef3c5b3cbd71fbe19604316dc997c52bf3e78c9417b424b9c7cfab4df4c80f202fa3685d7
-
SSDEEP
49152:RLDgMk7iWX0jPlgl/NW7uyGqH/psp69HUAe+K1ibUp:p8L7i6uEWTHRsg9Hh7K1ibU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6dda9365e6bd5b46bd9fe9e71f4a1b56d08a203fae39f5194cf88a9f56b98385
Files
-
6dda9365e6bd5b46bd9fe9e71f4a1b56d08a203fae39f5194cf88a9f56b98385.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tmnukipq Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pngnhxwn Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE