Static task
static1
Behavioral task
behavioral1
Sample
6c00f3c17696861b81b0c492915e2c37169e1394ae9836e5fa2b98d3fd188d22.exe
Resource
win7-20241010-en
General
-
Target
6c00f3c17696861b81b0c492915e2c37169e1394ae9836e5fa2b98d3fd188d22
-
Size
2.9MB
-
MD5
c8b18ac2f4dcc78bacece28d4b400bde
-
SHA1
6ceb9476a63b8182e333388988822c227db66280
-
SHA256
6c00f3c17696861b81b0c492915e2c37169e1394ae9836e5fa2b98d3fd188d22
-
SHA512
3c76b19b56bda2eff45e335085e2e147aca9a860e99330ff924e17064662db472b953eafccf4b45ec4ce2c9279fbaa96542c7c8868233220758b9dc95265513e
-
SSDEEP
49152:4S4tOFXstLFM4Qqkqhlt0yzemzjtox7NLan3:47tOFXshFtQqkut0OtiOn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c00f3c17696861b81b0c492915e2c37169e1394ae9836e5fa2b98d3fd188d22
Files
-
6c00f3c17696861b81b0c492915e2c37169e1394ae9836e5fa2b98d3fd188d22.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 159KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gjsodzyi Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ligmvuzm Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE