Static task
static1
Behavioral task
behavioral1
Sample
61860c069cb08083c3ff4d77792789a7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
61860c069cb08083c3ff4d77792789a7.exe
Resource
win10v2004-20231215-en
General
-
Target
61860c069cb08083c3ff4d77792789a7
-
Size
772KB
-
MD5
61860c069cb08083c3ff4d77792789a7
-
SHA1
6b06e193a85745c4529a923de8d63493ed6f9a29
-
SHA256
4bb7786bb6b5dfd6d50fdecb360db04642f4c060983b451fe8e294a43c4b7fd0
-
SHA512
fd5df94cb1ceba53fbeeae21de4d8a31de67ef883919e7a68634bb1f4c8a548b05f5452a0aa79f753b48703bf359b6e18afea3d63ab7502c81b8d7ae7b55b2bc
-
SSDEEP
12288:WoMx4S7EMdwI3bK8tGjVYmmBBOHo+3nK2Nqyb9resf+xGs2:Wo3Sw+sVAEI+38Xm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61860c069cb08083c3ff4d77792789a7
Files
-
61860c069cb08083c3ff4d77792789a7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 568KB - Virtual size: 567KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ