Static task
static1
Behavioral task
behavioral1
Sample
c0060d9226e87579497c77038c6055c34945f6e91fd71c1da07c17f9b0d68757.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c0060d9226e87579497c77038c6055c34945f6e91fd71c1da07c17f9b0d68757.exe
Resource
win10v2004-20230915-en
General
-
Target
c0060d9226e87579497c77038c6055c34945f6e91fd71c1da07c17f9b0d68757
-
Size
6.7MB
-
MD5
b28f660342c76d854788e26c4d2d39cd
-
SHA1
4d74fec7332effb08bcd4b67ceee579ce785cafd
-
SHA256
c0060d9226e87579497c77038c6055c34945f6e91fd71c1da07c17f9b0d68757
-
SHA512
c3fad2a714c8497b00d88ce8e3f554dc5744f103a525e68f09823a8611e93255587857344d3cf7dd8fa3f2d346c982c4afdf34f71cf458457e72ea1012671c57
-
SSDEEP
196608:5Q5pJY8ef5URyNGcZPDgksHoksRYLtnTmIVq8lIfSzJ6ld6+:5Q57eREQBlBsHoFRSTvIfSob
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0060d9226e87579497c77038c6055c34945f6e91fd71c1da07c17f9b0d68757
Files
-
c0060d9226e87579497c77038c6055c34945f6e91fd71c1da07c17f9b0d68757.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 2KB - Virtual size: 1.2MB
IMAGE_SCN_MEM_READ
VProtect Size: 615KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 1.7MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 15KB - Virtual size: 16KB
IMAGE_SCN_MEM_READ
VProtect Size: 16KB - Virtual size: 16KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE