Static task
static1
Behavioral task
behavioral1
Sample
6674f0a92e479a5a6c2f2bc496300070a1c706e0f013924256ebdd221010a68f.exe
Resource
win10v2004-20240802-en
General
-
Target
6674f0a92e479a5a6c2f2bc496300070a1c706e0f013924256ebdd221010a68f
-
Size
1.7MB
-
MD5
ee91e4d6c6a2a722f5e3d0f2b1fb59ae
-
SHA1
1326dab37a640c5e3f4f9c67664b83a275e63439
-
SHA256
6674f0a92e479a5a6c2f2bc496300070a1c706e0f013924256ebdd221010a68f
-
SHA512
e7408652400bd1f5d5fff5786b5a918475c6f200ccba914a860f00c29334fabcca47ce1128a84b501168017463ac8dc95708e41d78d3cadd018cf6c27a602ad3
-
SSDEEP
49152:EPFr49Zks/UfJdTsxh0sZd5RaD69itpzBHGz7xfilFk:EPB4LtXz5Quiei
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6674f0a92e479a5a6c2f2bc496300070a1c706e0f013924256ebdd221010a68f
Files
-
6674f0a92e479a5a6c2f2bc496300070a1c706e0f013924256ebdd221010a68f.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 79KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yammmggq Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xdstgjed Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE