Static task
static1
Behavioral task
behavioral1
Sample
6b6f6b6cc94b5785b646eeff711969476cd1aa3e7fc749c7813d1788b0d67b9b.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
6b6f6b6cc94b5785b646eeff711969476cd1aa3e7fc749c7813d1788b0d67b9b.exe
Resource
win10v2004-20231023-en
General
-
Target
6b6f6b6cc94b5785b646eeff711969476cd1aa3e7fc749c7813d1788b0d67b9b
-
Size
631KB
-
MD5
e19785e3af98f24a69fe1313b6006ed6
-
SHA1
e49f9b083a43161b34e2395296ab327297889adc
-
SHA256
6b6f6b6cc94b5785b646eeff711969476cd1aa3e7fc749c7813d1788b0d67b9b
-
SHA512
1bda0c616cca4747eb541ff396830bc03d2d442f69bc599eaf4100d8d9c701cb5a623baeb96b1afe153d1e8d7cba753ad33745f1e399dd6e4a3547e679c5178e
-
SSDEEP
12288:B7+gx51llsmpM0HOgcbT3QIRvv+oH8iVdpUY7z3kk+U65QgQx/F2:B7t5PpM0HrwTgIRX+oH8iuszkk+1QNt2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b6f6b6cc94b5785b646eeff711969476cd1aa3e7fc749c7813d1788b0d67b9b
Files
-
6b6f6b6cc94b5785b646eeff711969476cd1aa3e7fc749c7813d1788b0d67b9b.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE