Static task
static1
Behavioral task
behavioral1
Sample
6d9dc978266dcb8af4db6875c381f90ba6b0fef6e2f95fc75c4b71f80d0e0abd.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
6d9dc978266dcb8af4db6875c381f90ba6b0fef6e2f95fc75c4b71f80d0e0abd.exe
Resource
win10v2004-20231020-en
General
-
Target
6d9dc978266dcb8af4db6875c381f90ba6b0fef6e2f95fc75c4b71f80d0e0abd
-
Size
1.6MB
-
MD5
69d8a28a751e9b4de63fde25a3389d66
-
SHA1
fc70257042e02bd9237519a273e9ee5142911cc3
-
SHA256
6d9dc978266dcb8af4db6875c381f90ba6b0fef6e2f95fc75c4b71f80d0e0abd
-
SHA512
415d154982f5b00efee9ac82abcd38f01282f6bc78536673aeb1d6cc3d4a7b6b0adaa04bb2f83b64e4e18fa0a40dfeab128e45ff7ed334002e08a540a6a49b14
-
SSDEEP
24576:DbBVxlMJSu0a+np/1nO2LSr70Vv07bfV76F3dZDa3Cb2byC39bnakLwyhE:3IL0a+nJ1nO2SlcF3dtaSCrLc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6d9dc978266dcb8af4db6875c381f90ba6b0fef6e2f95fc75c4b71f80d0e0abd
Files
-
6d9dc978266dcb8af4db6875c381f90ba6b0fef6e2f95fc75c4b71f80d0e0abd.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 230KB
IMAGE_SCN_MEM_READ
VProtect Size: 615KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 988KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 67KB - Virtual size: 68KB
IMAGE_SCN_MEM_READ