Static task
static1
Behavioral task
behavioral1
Sample
6006d140e3a3be4dd193c520e7bed1e724b6282003c3c50f24e89a0bb96b62d0.exe
Resource
win7-20241010-en
General
-
Target
6006d140e3a3be4dd193c520e7bed1e724b6282003c3c50f24e89a0bb96b62d0
-
Size
1.8MB
-
MD5
69b984fa6bbd04e4d7fd2264fe986e1e
-
SHA1
c1dfdaf9e014b2eb13ecff0c45462a208d9668e0
-
SHA256
6006d140e3a3be4dd193c520e7bed1e724b6282003c3c50f24e89a0bb96b62d0
-
SHA512
2e21bf47771241f0ac2107ee156dcf2b20a5223165b5e403d84727bb2989b281235d8b3b1637dc2ee7eda15fbe5f7c7ad5f0c7ad528163d955860c9db6a829a5
-
SSDEEP
49152:MB6VtdO6WqlnQoR+csektkgOye67M1nvKUGx7seREKVo:MB6BO6WqlnawgGeM1nvK9se
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6006d140e3a3be4dd193c520e7bed1e724b6282003c3c50f24e89a0bb96b62d0
Files
-
6006d140e3a3be4dd193c520e7bed1e724b6282003c3c50f24e89a0bb96b62d0.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
brzcpvah Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ewsghkjs Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE