Static task
static1
Behavioral task
behavioral1
Sample
6ff02d73944e84ea570510a1cb0e936b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6ff02d73944e84ea570510a1cb0e936b.exe
Resource
win10v2004-20231215-en
General
-
Target
6ff02d73944e84ea570510a1cb0e936b
-
Size
184KB
-
MD5
6ff02d73944e84ea570510a1cb0e936b
-
SHA1
87a04ba061a94365934c5967a2a3c57043899dcf
-
SHA256
c7d4d9ce3d49302f70f6341e6d59d4df428f976de12317b0a4c0e63be6271f71
-
SHA512
a78369a2ad9fc5a62e01d9dabea4d62b067e15cd25040f71fbe78a3fce30531a57d26a7c4e3ebf1f5c3a49505140a3ebe68bfd9a6b7a24d2f91ac80304dfbc1b
-
SSDEEP
3072:4hisonmAVuFmggjSMFpVl8YYQOlWtQik2mSxcePoaylf3pF8:4h5oP+mgDMHVl89DNEylf3pF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ff02d73944e84ea570510a1cb0e936b
Files
-
6ff02d73944e84ea570510a1cb0e936b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ