Static task
static1
General
-
Target
ytkahVzwEz6W.exe
-
Size
29KB
-
MD5
f1a6df7a9dff032b9b801af40d457939
-
SHA1
2e3986f28c03f261131a8127675733cb6e9002ff
-
SHA256
960258343ffe4dc645840ccc0db9ad878284c77aae2e3510f00e5c4e7743c693
-
SHA512
654a9851dbabba8be93c2eb5df55e6ad7f9d8c8d0146cf459b4e61495d73a3b0b63c2e28e8092b9fe2475ad434475d94279eb7e6df64ae995b7851a9fed87633
-
SSDEEP
768:UGAajvpC1biiCCccG69SfSULhXpd1BH9JbIcGY9oFTU/sDK:UVaNC1biiCCccG69S6IbdZJbIcGUoNUv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ytkahVzwEz6W.exe
Files
-
ytkahVzwEz6W.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ