Static task
static1
Behavioral task
behavioral1
Sample
1c6b98ec639b6ef7e62934fe86e299d6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1c6b98ec639b6ef7e62934fe86e299d6.exe
Resource
win10v2004-20231222-en
General
-
Target
1c6b98ec639b6ef7e62934fe86e299d6
-
Size
1024KB
-
MD5
1c6b98ec639b6ef7e62934fe86e299d6
-
SHA1
a294fd5e782dc0ebb86e08dcb1630eef9b31122e
-
SHA256
efd3b15dd6bcb98c65b14fda56bb64056bad20811beb0354c413799550d7b0c9
-
SHA512
8cac0df3ca0dd24087bddcda76c0b88da23f2ae46400e418a93b5b5dc6225848e3683daf0305031fac1e5b7f614c6b08282c29e842fcb9932722909ca6527194
-
SSDEEP
24576:WyAzNqg6tASzkkD9j/O1qtOoMMlT0Vk7q:GYjAhk9/O1q0SlI6q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c6b98ec639b6ef7e62934fe86e299d6
Files
-
1c6b98ec639b6ef7e62934fe86e299d6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 333B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE