Static task
static1
Behavioral task
behavioral1
Sample
b6bc6822cb1a9af1e7c9b40b46826c49c538577b10739f5f2ebdf630d7bf1640.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b6bc6822cb1a9af1e7c9b40b46826c49c538577b10739f5f2ebdf630d7bf1640.exe
Resource
win10v2004-20230915-en
General
-
Target
b6bc6822cb1a9af1e7c9b40b46826c49c538577b10739f5f2ebdf630d7bf1640
-
Size
239KB
-
MD5
0d1fb3c503bc4d442c05b856ba04d31b
-
SHA1
8581629b6dbfa979349867bec38e4d355509c55c
-
SHA256
b6bc6822cb1a9af1e7c9b40b46826c49c538577b10739f5f2ebdf630d7bf1640
-
SHA512
0d43ab371e418e1de4c8fb2c00eaaed116a626bdcef92bc644027a1ee36e92f9662b92cedfc2bc280b9ea1255f595d26f3d6d1dbbf483d8bc8a4d6b7d71ab2a8
-
SSDEEP
3072:Q+ftffepVPIxETOEcwM1ZEShP+u1MKW3sF0KQRkQZiwA5rTgvu6UY289Txg2Gbie:jVfgPupn1ZEx3sgTiwcIw6TWnQiTj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6bc6822cb1a9af1e7c9b40b46826c49c538577b10739f5f2ebdf630d7bf1640
Files
-
b6bc6822cb1a9af1e7c9b40b46826c49c538577b10739f5f2ebdf630d7bf1640.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE