Static task
static1
Behavioral task
behavioral1
Sample
6aaf9e631633b0b17c721207e2f3e344e3301e9e046857e8aa7233677bedeb0a.exe
Resource
win10-20230220-en
Behavioral task
behavioral2
Sample
6aaf9e631633b0b17c721207e2f3e344e3301e9e046857e8aa7233677bedeb0a.exe
Resource
win7-20230220-en
General
-
Target
6aaf9e631633b0b17c721207e2f3e344e3301e9e046857e8aa7233677bedeb0a
-
Size
1.3MB
-
MD5
589fba2acec4993cdcac7abe9645e24d
-
SHA1
9f04c3d2903f66ba4b691ef380f4848abbd2f0d8
-
SHA256
6aaf9e631633b0b17c721207e2f3e344e3301e9e046857e8aa7233677bedeb0a
-
SHA512
3ed705dd91a18526784953b6ce23aaa07820c3b3d9aebfd70a658a5ddae1817cb8c00d34955365d9237753fcbb195581bbedfc59f14b3b96a359a7c7bfd15cc3
-
SSDEEP
24576:sGqHswi5t9ImxcGzNDE0HV6JJ3spF0mc1bYZspG:wHswi5t2uHMZ1b8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6aaf9e631633b0b17c721207e2f3e344e3301e9e046857e8aa7233677bedeb0a
Files
-
6aaf9e631633b0b17c721207e2f3e344e3301e9e046857e8aa7233677bedeb0a.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 457KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 50KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 115KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 748KB - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE