Static task
static1
General
-
Target
6fefbaa7c5cb09a64b483a20030e7c6e8411def2a1c9bfc9432cf2636c0d2017
-
Size
1.8MB
-
MD5
a5a80ebfc812f7f5117e1c290d03c66f
-
SHA1
95adf3f585ff1b332973752f27edeeca5049452a
-
SHA256
6fefbaa7c5cb09a64b483a20030e7c6e8411def2a1c9bfc9432cf2636c0d2017
-
SHA512
6308155f9dcd7ae7f15da0fe7a71bbe7aa910b05abbbad036b2c1a6f473dbdc955f4e7d0cdf167206409877d07ce06d655f085ad89a5a17792f0ae3c14f253f6
-
SSDEEP
49152:lZ0tauquw+6eEtsK6OsWVkCv17Uo35biaJT:lZ0Quq6EtUHCvZb3T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6fefbaa7c5cb09a64b483a20030e7c6e8411def2a1c9bfc9432cf2636c0d2017
Files
-
6fefbaa7c5cb09a64b483a20030e7c6e8411def2a1c9bfc9432cf2636c0d2017.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xsqnmxqx Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xirgnydc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE