Static task
static1
Behavioral task
behavioral1
Sample
6eed28cf9d0ea46807447495f0de7465.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6eed28cf9d0ea46807447495f0de7465.exe
Resource
win10v2004-20231215-en
General
-
Target
6eed28cf9d0ea46807447495f0de7465
-
Size
112KB
-
MD5
6eed28cf9d0ea46807447495f0de7465
-
SHA1
f68deb426a559119772bb5b748185848cc8cacd7
-
SHA256
b1aa589258386bf62f3f158c597206ec03352358bd2777c5fa5997ff33b10ff3
-
SHA512
5fdaacd1a43c07c701c09719a7d5c3e48a1f134c1553ae3e5bef57db048a39e6175d63f3e872e4b6485f38c2b91a4169fb3e276695438108fab112d400c2bb31
-
SSDEEP
3072:O41ZZ7hOYfXzWAek3pVBStn8IrG53TqqZqE8LOvQ0:jHRsIjWnc8tZ653TqqZras
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6eed28cf9d0ea46807447495f0de7465
Files
-
6eed28cf9d0ea46807447495f0de7465.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
lW4=yZI Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ