Static task
static1
Behavioral task
behavioral1
Sample
6d95c4f6ba7c24904c0c850e8602111f3b6603a639e6e81a7d41da52c83f0d3b.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6d95c4f6ba7c24904c0c850e8602111f3b6603a639e6e81a7d41da52c83f0d3b.exe
Resource
win10v2004-20230831-en
General
-
Target
6d95c4f6ba7c24904c0c850e8602111f3b6603a639e6e81a7d41da52c83f0d3b
-
Size
836KB
-
MD5
b5ac461a0243a9f2130603ffd7220cdd
-
SHA1
2cfa644516dee09a0e2fdd56fe2f036ca743f2c2
-
SHA256
6d95c4f6ba7c24904c0c850e8602111f3b6603a639e6e81a7d41da52c83f0d3b
-
SHA512
fec46192da8aca09da65e22d710181962e1d6bbc401b8d6244138b84f4d5c1665d524f059df27b07080a25f0c5d3fab8e9ea184dbb2604a29be7e524bb8c4edc
-
SSDEEP
12288:sO56xfRwArL1PW5AOo6AWB7cTjU1Lle3KPrvm/IkITdd5O4E2HOPrnaFTI0xB1:rY7wA9PW5AOuWWiwIrvSIkIxsrEf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6d95c4f6ba7c24904c0c850e8602111f3b6603a639e6e81a7d41da52c83f0d3b
Files
-
6d95c4f6ba7c24904c0c850e8602111f3b6603a639e6e81a7d41da52c83f0d3b.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 648KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.spack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RCryptor Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ