Static task
static1
Behavioral task
behavioral1
Sample
6e336aa92131635aeefe46e1f10a2458fd71852556e245cd28587c90cb3e2240.exe
Resource
win7-20241010-en
General
-
Target
6e336aa92131635aeefe46e1f10a2458fd71852556e245cd28587c90cb3e2240.exe
-
Size
1.8MB
-
MD5
f1266252191fb4eab8fa43277617cad5
-
SHA1
32d1716e16cc95159fe7a8dc6d165527b05e7123
-
SHA256
6e336aa92131635aeefe46e1f10a2458fd71852556e245cd28587c90cb3e2240
-
SHA512
fdaa72cb7d4ad5a039172db8764949c18ecc27b1e0c521ebc020cbc66fe14d157e900d39d320ed9304408961adc4d7835065363ba82e8086ce11fa3f971db48d
-
SSDEEP
24576:9w/gXXZLf9FpuSVA83ZIaoOD8BR98BpLOKKxsGaC3x5MY0s9r3k7in9tFvGHj:9kKpVu8pIO+D8rLOKHRQ5MYR3mVD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e336aa92131635aeefe46e1f10a2458fd71852556e245cd28587c90cb3e2240.exe
Files
-
6e336aa92131635aeefe46e1f10a2458fd71852556e245cd28587c90cb3e2240.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
muzjjppg Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wbgldlky Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE