Static task
static1
General
-
Target
a753979f89debe5427241b085cfa4462b5ef7bcf502106f91165e67ddf9d5828
-
Size
1.8MB
-
MD5
ddc85728e0670438b6aa74bd2c9c461b
-
SHA1
ee91a95010fe03ae7b104859e5b69ffbcd667c3b
-
SHA256
a753979f89debe5427241b085cfa4462b5ef7bcf502106f91165e67ddf9d5828
-
SHA512
6164c7b16c89199a3c34e62d5976f9673581a9bc754ea6a3c03bfc497d1192752a1a4eac1192bf86281e0ec681386e777f111244ff58c43497f0ce78e0b6a70c
-
SSDEEP
24576:tAvr5zkWQHSF6UZXz/Pym6xet0I6HUpAgzQoGM+NDL0mPhcaK9Uj02cC:tAD1kWcUx/PyBIfpAGQoExca11cC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a753979f89debe5427241b085cfa4462b5ef7bcf502106f91165e67ddf9d5828
Files
-
a753979f89debe5427241b085cfa4462b5ef7bcf502106f91165e67ddf9d5828.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ekxusscj Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vsobhekd Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE