Static task
static1
Behavioral task
behavioral1
Sample
6304c8e21c900acf4ba9043cdb419376c741f0f5e680d269a268404d4e2f6f5b.exe
Resource
win7-20230220-en
General
-
Target
6304c8e21c900acf4ba9043cdb419376c741f0f5e680d269a268404d4e2f6f5b
-
Size
5.2MB
-
MD5
a5f5639a63970f841be298b50f7edb0a
-
SHA1
e3eeda42734c61c737c3ae1a6b582bfbaf67a6a0
-
SHA256
6304c8e21c900acf4ba9043cdb419376c741f0f5e680d269a268404d4e2f6f5b
-
SHA512
35ce28c3f5845813f9bc1e665f51a2c53b84fad622d8cb852aa87b226c1dccfc7259fc2cacef84c92bbdb3ecf4688c6220afad86525b5acf140222837fa4dbf2
-
SSDEEP
98304:EDjarHbnygq1I6kPiDMHLnHK8SHgM1Mt80hPHC6rohuj2F1ubbIqkBZvENvSE7OE:EDjarHbnygJ6bYmWYMt8u/CGmuyF1sbd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6304c8e21c900acf4ba9043cdb419376c741f0f5e680d269a268404d4e2f6f5b
Files
-
6304c8e21c900acf4ba9043cdb419376c741f0f5e680d269a268404d4e2f6f5b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE