Static task
static1
Behavioral task
behavioral1
Sample
600c0e1d5ba4febd7a4d1d08a979d493173058e2c6af6e427e0395d9fdb392f3.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
600c0e1d5ba4febd7a4d1d08a979d493173058e2c6af6e427e0395d9fdb392f3.exe
Resource
win10v2004-20241007-en
General
-
Target
600c0e1d5ba4febd7a4d1d08a979d493173058e2c6af6e427e0395d9fdb392f3.exe
-
Size
2.8MB
-
MD5
e8f5414a170b298c9f91bb364dd73fb3
-
SHA1
c1973dc4fa8641a0c2ede99e6aa550dfa6377f1d
-
SHA256
600c0e1d5ba4febd7a4d1d08a979d493173058e2c6af6e427e0395d9fdb392f3
-
SHA512
f892ec19b1288e2bc8aabb1028a27e8115160ac1b6f83a24c49be498ebfc2b499a38716655811587bf8a76330ff3b5f22cdf19e17b1a0ec2c1f7ac7e95677ee5
-
SSDEEP
49152:tbpxq+3VgOhWDbGsvMHGN+xmSVqUZHN6xHiE:tbps4V7cb/vFN+xDVqZRi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 600c0e1d5ba4febd7a4d1d08a979d493173058e2c6af6e427e0395d9fdb392f3.exe
Files
-
600c0e1d5ba4febd7a4d1d08a979d493173058e2c6af6e427e0395d9fdb392f3.exe.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
odjoyjkz Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idplysge Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE