Static task
static1
Behavioral task
behavioral1
Sample
6a5236b33d041ab1d4f6c3d2b9c1c2ab288b1caab05ee7cc38ad645b4acf64a0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6a5236b33d041ab1d4f6c3d2b9c1c2ab288b1caab05ee7cc38ad645b4acf64a0.exe
Resource
win10v2004-20230915-en
General
-
Target
6a5236b33d041ab1d4f6c3d2b9c1c2ab288b1caab05ee7cc38ad645b4acf64a0
-
Size
1.2MB
-
MD5
58d8db208561dfdf6e731b3f09734d2c
-
SHA1
5e6c5c38dce2b687d2a298e96b41ebe01fcaa35b
-
SHA256
6a5236b33d041ab1d4f6c3d2b9c1c2ab288b1caab05ee7cc38ad645b4acf64a0
-
SHA512
bf3202eb2af41af1f78f41fa8a7425c8cdf797c40662e7c81508910c67e99b84796e93da5159540f805d67b248d282bb8cbb606e2525e93cd8ccf2736d3607e9
-
SSDEEP
12288:eMLTaNRlBVxMSukf5nsWQ14oR5c4X9jSiKS6vs/Z7DppHGqn7LSfdzWuy2+0w25u:4bBVxNHf5nsWQKrKYiK4/hPTCfhbhu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a5236b33d041ab1d4f6c3d2b9c1c2ab288b1caab05ee7cc38ad645b4acf64a0
Files
-
6a5236b33d041ab1d4f6c3d2b9c1c2ab288b1caab05ee7cc38ad645b4acf64a0.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.0MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 544KB - Virtual size: 552KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ