Static task
static1
Behavioral task
behavioral1
Sample
6f196962013c4f8b5891bff0a2c360f0_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6f196962013c4f8b5891bff0a2c360f0_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
6f196962013c4f8b5891bff0a2c360f0_exe32.exe
-
Size
304KB
-
MD5
6f196962013c4f8b5891bff0a2c360f0
-
SHA1
42aea028803737a9efb4547d07863d5a6b48d0b9
-
SHA256
0971078b6b03bc9831f239b2354a95153c6bc8a8e8288ee570ae9132cb011d4a
-
SHA512
6da03cab79fdcd017a6f278a0dc2b8692439910c51c398cf052d3cca77a35f386d9dd80f838542b2d9234f089b90fa322ec6228e07e7cc1e60e797bde0dcce72
-
SSDEEP
3072:gcWOtpBCtBXRvjxCb5NgXDY7uSlkJcUa7kYQTcqW2NdQQGH/UDhSCUc4aqTB3kwi:lWxlKgzelZNQSBQGH/CSpWqTGw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f196962013c4f8b5891bff0a2c360f0_exe32.exe
Files
-
6f196962013c4f8b5891bff0a2c360f0_exe32.exe.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 236KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE