Static task
static1
Behavioral task
behavioral1
Sample
6da015a4d07aaa513f90f351e52f6789345826bf255e5ea616b2bfded6ed4477.exe
Resource
win7-20240903-en
General
-
Target
6da015a4d07aaa513f90f351e52f6789345826bf255e5ea616b2bfded6ed4477.exe
-
Size
4.2MB
-
MD5
88bf63a8e16a403ede877c51371debe2
-
SHA1
04dfbf773b963149cfbe1787bae7a3c8a5bd1f34
-
SHA256
6da015a4d07aaa513f90f351e52f6789345826bf255e5ea616b2bfded6ed4477
-
SHA512
886629e4f4d041cba51659885ad27451f4103cf1c556de21439b52b362b6f03a046b1c245a6b2259d6726fbf9db9f0ea1fee72dde86303fe7aec8a597dd6da9f
-
SSDEEP
98304:VkzhOo9nQywOz4og4tjaOZz5bimieR05PXtGh:VkzhOuQ714teWfie05ftGh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6da015a4d07aaa513f90f351e52f6789345826bf255e5ea616b2bfded6ed4477.exe
Files
-
6da015a4d07aaa513f90f351e52f6789345826bf255e5ea616b2bfded6ed4477.exe.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcpy
Sections
Size: 2.5MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ewpklulw Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ppnqxcaj Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE