Static task
static1
Behavioral task
behavioral1
Sample
6e58d7234f47e11742e3b1275f38fe7818ad23d35a88b3624d3eb8d42fbbb9c1.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6e58d7234f47e11742e3b1275f38fe7818ad23d35a88b3624d3eb8d42fbbb9c1.exe
Resource
win10v2004-20230831-en
General
-
Target
6e58d7234f47e11742e3b1275f38fe7818ad23d35a88b3624d3eb8d42fbbb9c1
-
Size
3.5MB
-
MD5
49c99228c6f7a82ed65aeb33dacc2508
-
SHA1
2705e1baaf17ffb28610b0c4277e0ce728d8d704
-
SHA256
6e58d7234f47e11742e3b1275f38fe7818ad23d35a88b3624d3eb8d42fbbb9c1
-
SHA512
c7cb98a01c0c0db3e207de9206b2b07ee87d3689b733552d58fdee76e484f8ecf850fcd45c375e90b3eb593b714b3f57fa40303d896adae5fcf4f0bb6678ca34
-
SSDEEP
49152:2M7P6JPscnNLCsMd1DeKdlG3Z/+wC7gYN1XQ6Lymjd8Xcl5lTQ2u+vB5XJvClmM:x2t1nN1MHZEZGwCMEhQ6T8Xcl5NLDFhM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e58d7234f47e11742e3b1275f38fe7818ad23d35a88b3624d3eb8d42fbbb9c1
Files
-
6e58d7234f47e11742e3b1275f38fe7818ad23d35a88b3624d3eb8d42fbbb9c1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
PCGUARD Size: 512B - Virtual size: 8.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PCGUARD Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE