Static task
static1
Behavioral task
behavioral1
Sample
6156c9c8846705a61e51ab87d38b4516.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6156c9c8846705a61e51ab87d38b4516.exe
Resource
win10v2004-20231215-en
General
-
Target
6156c9c8846705a61e51ab87d38b4516
-
Size
645KB
-
MD5
6156c9c8846705a61e51ab87d38b4516
-
SHA1
5ad595279c11461674bcf63a626fcc42f975e995
-
SHA256
a7c15d35a1fa01e1cc3da6fbffc6e5a36932c320f2d52ac0d6bce95b3de15a3c
-
SHA512
0871f9304cc563b0ec14b0768d0940e1af22544728783cfacef192931f02a4de9dff593b4c41820141940c8cce3e4764d93e9feaf1e6215cee8d29ad4be658ca
-
SSDEEP
6144:wJ82asJfnlAJwT71w+DtmVlTWw8oY4JHfTcE6sTNrCMHJeTBh+:wOWJ8wT7SoScCY4JHLcElTNm8eT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6156c9c8846705a61e51ab87d38b4516
Files
-
6156c9c8846705a61e51ab87d38b4516.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 352KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l2 Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ