Static task
static1
Behavioral task
behavioral1
Sample
06ff737e247f9ba4fb10754cc6cd9478.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
06ff737e247f9ba4fb10754cc6cd9478.exe
Resource
win10v2004-20231215-en
General
-
Target
06ff737e247f9ba4fb10754cc6cd9478
-
Size
209KB
-
MD5
06ff737e247f9ba4fb10754cc6cd9478
-
SHA1
24b16fd0c3a94c579d73fcc40036c7696383e673
-
SHA256
16b4583496914d4e9891edbef62727e09dc592851ed2ab00082b0209138c8b1c
-
SHA512
da4a8d6d914baa2611d7230c587b4b713dc3bb7a01d63255362b21f216e6a01a7dca4b6ade2cd94ad6f1072c12c70e76396ee5cde260f0f9b261450b9c4a69e6
-
SSDEEP
3072:DgB6xRjMG7KcEEKIy+ZVcD0NNM4+x7O+mY/hOfBkKW0JLnOl9V5a+t:Di6x9Jx2IyUVu0NG4p9COJDOlxt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06ff737e247f9ba4fb10754cc6cd9478
Files
-
06ff737e247f9ba4fb10754cc6cd9478.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xur Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE