Static task
static1
General
-
Target
6b5bf013d1b6ca34b30026f39cde1cd01d0577a517f74148ad9b40d0e3f7e00a
-
Size
1.8MB
-
MD5
db0e3049b9ad329b9231d6ab9956325f
-
SHA1
a7e3bd0d1e86fa1177498d498c742e4aff680b40
-
SHA256
6b5bf013d1b6ca34b30026f39cde1cd01d0577a517f74148ad9b40d0e3f7e00a
-
SHA512
3e6465845a10b0be9a599d3188c6edc7ba95534eb2f73540013dc7a051a253f3edb228db921810442e4352ad350fef6ad373c4b01b511852740455e2142b8d79
-
SSDEEP
49152:zXGd0Gke4fV/3J3F+UN3KltKbqk2ToK3Ibrpo/:zXG3K53F1Kldk2TonVo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b5bf013d1b6ca34b30026f39cde1cd01d0577a517f74148ad9b40d0e3f7e00a
Files
-
6b5bf013d1b6ca34b30026f39cde1cd01d0577a517f74148ad9b40d0e3f7e00a.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 146KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mdfjaudv Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wrfropco Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE