Static task
static1
Behavioral task
behavioral1
Sample
6215976f0759e8ebe9bb1a97710bfc27119f7632f4e1c1499b14d2897857f03e.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6215976f0759e8ebe9bb1a97710bfc27119f7632f4e1c1499b14d2897857f03e.exe
Resource
win10v2004-20230915-en
General
-
Target
6215976f0759e8ebe9bb1a97710bfc27119f7632f4e1c1499b14d2897857f03e
-
Size
1.8MB
-
MD5
e8ebd445d6fbb7e201c4a361334d3c58
-
SHA1
c2b7df9d0847ef63c4a55caa90080dc45628f13c
-
SHA256
6215976f0759e8ebe9bb1a97710bfc27119f7632f4e1c1499b14d2897857f03e
-
SHA512
a16dfa5562f93cfddee9b3fa5f0ed5b0f3190aa89763d00cab2cc35302393ac35caf5346bf07ee517f06017887b99d0acd4803b23dfb6a6ada2001882b4c6f5c
-
SSDEEP
24576:P4Pf99O0HR6Mw+FD+K0TsMgNwazFkhf2FfWl8KuqGavkg3NyNIbbbIoIBAUZLYx:PI6c+KXNwahQ+s8KuqGaX0ToIBAUZLY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6215976f0759e8ebe9bb1a97710bfc27119f7632f4e1c1499b14d2897857f03e
Files
-
6215976f0759e8ebe9bb1a97710bfc27119f7632f4e1c1499b14d2897857f03e.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 746KB - Virtual size: 748KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 887KB - Virtual size: 888KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 92KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
HH Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE