Static task
static1
Behavioral task
behavioral1
Sample
6416d9d75910685b7906b1c59a7d58686ab2a662db443a1aecb2057e66cfde6a.exe
Resource
win7-20240903-en
General
-
Target
6416d9d75910685b7906b1c59a7d58686ab2a662db443a1aecb2057e66cfde6a
-
Size
1.8MB
-
MD5
0ddcd6763d9c2104f94916ad73e8e3dc
-
SHA1
f8b8cc9c9e7ac5d74241a7ea87a5a8f22a1dc4a9
-
SHA256
6416d9d75910685b7906b1c59a7d58686ab2a662db443a1aecb2057e66cfde6a
-
SHA512
ee12c0253de7874824e5eaf3e97d80e6a78d3022425821298f6624602b3c4e783e9f388119ca7431635ac7447f473412e31880b6931d1ca0896db095e9a32d39
-
SSDEEP
49152:NPq/nyPGddethO8HCQfvQSnjiCfiRig2p3HDHa:snyeyhz7f9npiajH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6416d9d75910685b7906b1c59a7d58686ab2a662db443a1aecb2057e66cfde6a
Files
-
6416d9d75910685b7906b1c59a7d58686ab2a662db443a1aecb2057e66cfde6a.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 151KB - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gfsnpvyd Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cievrdhi Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE