Static task
static1
Behavioral task
behavioral1
Sample
6ac56f8d334fd45491210158f6ab5d894f1a82b29ecdb7d4818d311147a49031.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6ac56f8d334fd45491210158f6ab5d894f1a82b29ecdb7d4818d311147a49031.exe
Resource
win10v2004-20230915-en
General
-
Target
6ac56f8d334fd45491210158f6ab5d894f1a82b29ecdb7d4818d311147a49031
-
Size
786KB
-
MD5
7621870e6e8f928ac223d87bb5a3acc8
-
SHA1
40237237deb13cdc2e0f9463cf845002cc6ffa46
-
SHA256
6ac56f8d334fd45491210158f6ab5d894f1a82b29ecdb7d4818d311147a49031
-
SHA512
f0c4795e095d8abd0e0e8e748c8ff73a24bd3d38ab8e50a8b2da80fe4b773d8fe65516eb2c90ee183df4418f5e80f9168f1408fda2697fab825963b343362986
-
SSDEEP
6144:+spAllADwPw2nhfqH0WUTL0n8oGmXlUFzvUZa/fd8jSlqArUyhJ95EyGVsaA1G2p:+ryCnhw0jTC85Fnd8WlphJkLVsY2xaEh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ac56f8d334fd45491210158f6ab5d894f1a82b29ecdb7d4818d311147a49031
Files
-
6ac56f8d334fd45491210158f6ab5d894f1a82b29ecdb7d4818d311147a49031.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 738KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE