Static task
static1
Behavioral task
behavioral1
Sample
6e4dec29efc05f9571c7c1fa8544a5faa26f039a54e5a9b0ed6bd3c9d5bf7ba3.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
6e4dec29efc05f9571c7c1fa8544a5faa26f039a54e5a9b0ed6bd3c9d5bf7ba3.exe
Resource
win10v2004-20230703-en
General
-
Target
6e4dec29efc05f9571c7c1fa8544a5faa26f039a54e5a9b0ed6bd3c9d5bf7ba3
-
Size
3.4MB
-
MD5
06ea87a6ac60b7829b4932b4b4e8b1ae
-
SHA1
0068480ddda823974523f91ebf2beaf68dbf9de2
-
SHA256
6e4dec29efc05f9571c7c1fa8544a5faa26f039a54e5a9b0ed6bd3c9d5bf7ba3
-
SHA512
71f284f04bea852c74655a50e7ef0922f4bec6fdf5ca0e7a9e69f6bd837b97636ea5690083947104312d7da1c49691fa3a278d18c6536ffb344a8229983c7a95
-
SSDEEP
49152:xsxDSZ7KBt3VSwUhpXntTclks6mQkGnzAzzvNtski4+QQoK+yINU:xsxKeBDJIXNcksJGzSzjQQQoK+yINU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e4dec29efc05f9571c7c1fa8544a5faa26f039a54e5a9b0ed6bd3c9d5bf7ba3
Files
-
6e4dec29efc05f9571c7c1fa8544a5faa26f039a54e5a9b0ed6bd3c9d5bf7ba3.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ