Static task
static1
Behavioral task
behavioral1
Sample
6e7c6e001101928b887a9eab7b7c8be1c19e1c6b54a4f7434fb84d7c022e779a.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
6e7c6e001101928b887a9eab7b7c8be1c19e1c6b54a4f7434fb84d7c022e779a.exe
Resource
win10v2004-20230703-en
General
-
Target
6e7c6e001101928b887a9eab7b7c8be1c19e1c6b54a4f7434fb84d7c022e779a
-
Size
4.9MB
-
MD5
597adea2bda85f890e85365e39e8cbee
-
SHA1
c5f22e10dfde563c4b12a2815acfaea9c74a2424
-
SHA256
6e7c6e001101928b887a9eab7b7c8be1c19e1c6b54a4f7434fb84d7c022e779a
-
SHA512
f0750c9f60a89535d069b1dc121304c988d700377d8f78f6c82fd194deb206009b69916641bcf8ea18bbbc6711541a69b07271a1cbb0cc5ecc8e7af0adcce186
-
SSDEEP
98304:4ZRlLWqhSUM5FtjbhOdEqwDkseS7m3gWSiMcL3dYr:yLaUM5FZbhAEqZSYgWwc7q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e7c6e001101928b887a9eab7b7c8be1c19e1c6b54a4f7434fb84d7c022e779a
Files
-
6e7c6e001101928b887a9eab7b7c8be1c19e1c6b54a4f7434fb84d7c022e779a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3.5MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4.1MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 104KB - Virtual size: 104KB
IMAGE_SCN_MEM_READ