Static task
static1
Behavioral task
behavioral1
Sample
6c856e68add55877883496c1f769081e2e4d00276af53439b76db834671f3682.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6c856e68add55877883496c1f769081e2e4d00276af53439b76db834671f3682.exe
Resource
win10v2004-20231215-en
General
-
Target
6c856e68add55877883496c1f769081e2e4d00276af53439b76db834671f3682
-
Size
5.4MB
-
MD5
1a4c5a15bea30c270da147b259d6b137
-
SHA1
ba22c9ca93130aefe1d59c481fab3f8900f79463
-
SHA256
6c856e68add55877883496c1f769081e2e4d00276af53439b76db834671f3682
-
SHA512
9efc403357ceb18c8fc9750488daeccd9aa239c5ae969eb8aaab86f615a84282c80ee003f71ca7318639524419ec7c92418b762508f335870e3f36e5f297120e
-
SSDEEP
98304:NNDwSlUk9KPsUxfAdNmkVi+qkPZKOBuyaoY7cjG:N1Uk9KmdNmksOBuyaopjG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c856e68add55877883496c1f769081e2e4d00276af53439b76db834671f3682
Files
-
6c856e68add55877883496c1f769081e2e4d00276af53439b76db834671f3682.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.Upack Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE