Static task
static1
Behavioral task
behavioral1
Sample
6c26b6a0ba8d2ad1676b4d7da6b6090579f80207e70b1bc5a29439b944454369.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6c26b6a0ba8d2ad1676b4d7da6b6090579f80207e70b1bc5a29439b944454369.exe
Resource
win10v2004-20230915-en
General
-
Target
6c26b6a0ba8d2ad1676b4d7da6b6090579f80207e70b1bc5a29439b944454369
-
Size
6.1MB
-
MD5
e75aa8372106fc959caef5b072fbcaf9
-
SHA1
918113189f96542b4781a05fa9220316e7690d57
-
SHA256
6c26b6a0ba8d2ad1676b4d7da6b6090579f80207e70b1bc5a29439b944454369
-
SHA512
85bda54e267c562c68d812a59759dbe660e75ebb1d617dc0778b04c02c13bd362ca9ef9198c1300572670d27576da52be6f8a6f9da54b8a636c30284e076ebb1
-
SSDEEP
196608:PCKbQSx37PlmhuFotFzqIo4pQATo4TINogMlf6Lk:P3QE3xzOtxqkRYElf6g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c26b6a0ba8d2ad1676b4d7da6b6090579f80207e70b1bc5a29439b944454369
Files
-
6c26b6a0ba8d2ad1676b4d7da6b6090579f80207e70b1bc5a29439b944454369.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 648KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 728KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 48KB - Virtual size: 559KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 412KB - Virtual size: 583KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 48KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.winlice Size: - Virtual size: 6.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ