Static task
static1
Behavioral task
behavioral1
Sample
06814355f0993a28d40e55e7fb5a6156.exe
Resource
win7-20231215-en
General
-
Target
06814355f0993a28d40e55e7fb5a6156
-
Size
2.7MB
-
MD5
06814355f0993a28d40e55e7fb5a6156
-
SHA1
98587b4f09bde0088f798cba92e81fe5a495b926
-
SHA256
e7253f9defc56cae170196d101fc316c1144d814f28c791bc31b00d918f90620
-
SHA512
8b379929b458784dc0ed27a2b3b70131bcc6cf7734ee2771e1746775e2b433969ed3477de1500cc848f71ec5af7453822237e974f9356051884d9fae3d49dc0b
-
SSDEEP
49152:qmi3kachk3olhemR8Gy2OJpB5AbGxv1c9iV2pIbEC0QW7jOs5t6uxpa+ItHYLNut:E0Peg4c8Fagq9iV2pIw7/P5t6u70t6u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06814355f0993a28d40e55e7fb5a6156
Files
-
06814355f0993a28d40e55e7fb5a6156.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 319KB - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 2.3MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE