Static task
static1
Behavioral task
behavioral1
Sample
6094deb62a5477ef26f18705f89f0e26.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6094deb62a5477ef26f18705f89f0e26.exe
Resource
win10v2004-20231222-en
General
-
Target
6094deb62a5477ef26f18705f89f0e26
-
Size
1024KB
-
MD5
6094deb62a5477ef26f18705f89f0e26
-
SHA1
2c1bde8ee1b25ac04ef715a28038f8826e73b7f0
-
SHA256
c48f16c5321ec393e03d8709220e1ee2482981c0331c103a4902cf4529ef9cf4
-
SHA512
5b62d908f12a2d00b4509845e518da513efc4e664d4316b9176ac3d32e512b2d002177ededac1693f2e7a15e04a241f2709a9948a965b89749ad34025850ea69
-
SSDEEP
24576:d6GKBteFA9IgakdDXCW8b7Tru/GVEdHSb:NKqA9Djeb7TrVsHSb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6094deb62a5477ef26f18705f89f0e26
Files
-
6094deb62a5477ef26f18705f89f0e26.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE