Static task
static1
Behavioral task
behavioral1
Sample
b6e1681a77dd49805c95d337ed0515f5a14c28ee93c033d4ce9964235ba6fccd.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
b6e1681a77dd49805c95d337ed0515f5a14c28ee93c033d4ce9964235ba6fccd.exe
Resource
win10v2004-20230703-en
General
-
Target
b6e1681a77dd49805c95d337ed0515f5a14c28ee93c033d4ce9964235ba6fccd
-
Size
4.0MB
-
MD5
0044905e9f325259277d53bc02c092a6
-
SHA1
bcaa1e2639fca559cf04584b58495e03554a0921
-
SHA256
b6e1681a77dd49805c95d337ed0515f5a14c28ee93c033d4ce9964235ba6fccd
-
SHA512
dc70b8d790a8df0d432546fadb73e6f1a38d7453c0a7dfc766d2cb420c16f55ca7bca74b0777ea3b2cf006c7a33a3de4bd1141bda91c6ef90d26e327e2d1469e
-
SSDEEP
98304:XcsxhqyJwkTt2uVobwcJdsXZtF79x566l2:Xgy6NuVoMisXZtXb6w2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6e1681a77dd49805c95d337ed0515f5a14c28ee93c033d4ce9964235ba6fccd
Files
-
b6e1681a77dd49805c95d337ed0515f5a14c28ee93c033d4ce9964235ba6fccd.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 4.0MB - Virtual size: 8.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE