Static task
static1
Behavioral task
behavioral1
Sample
6e4ff532445f9a8f720764b740b9e004063d5946cbbc58f7dac4fb5c5d96dc9f.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6e4ff532445f9a8f720764b740b9e004063d5946cbbc58f7dac4fb5c5d96dc9f.exe
Resource
win10v2004-20230915-en
General
-
Target
6e4ff532445f9a8f720764b740b9e004063d5946cbbc58f7dac4fb5c5d96dc9f
-
Size
1.1MB
-
MD5
0b4050751afd4c6eae5b8b233352dff6
-
SHA1
3171635e36e7cdfa667872ecb3ddb96a1b3ce3c4
-
SHA256
6e4ff532445f9a8f720764b740b9e004063d5946cbbc58f7dac4fb5c5d96dc9f
-
SHA512
0df32bbff38217ce5d16f9127f48603455e27ab803aeae6489c0ecc2ff8394e3a3501c41e9bb8f7a8e72333009b2a067b0f7e81290226691708fcf556dd8163b
-
SSDEEP
12288:M7+X0DNGKjmvXp5rhy9S9Q7OcDQAz7TxfsxQ21o1X9h4+eQNsoalF98MA+nkEzln:M7Lvmv5uEncDPz/xmo1X9hTs5FTn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e4ff532445f9a8f720764b740b9e004063d5946cbbc58f7dac4fb5c5d96dc9f
Files
-
6e4ff532445f9a8f720764b740b9e004063d5946cbbc58f7dac4fb5c5d96dc9f.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE