Static task
static1
Behavioral task
behavioral1
Sample
6343dc193359ea2cf63e6055d300eca9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6343dc193359ea2cf63e6055d300eca9.exe
Resource
win10v2004-20231215-en
General
-
Target
6343dc193359ea2cf63e6055d300eca9
-
Size
97KB
-
MD5
6343dc193359ea2cf63e6055d300eca9
-
SHA1
be10627bd70b33dad9968a5a8c4e7050efd7da26
-
SHA256
ddbe4d462cc92ca46a82fc56c90bede2882ae4c8e1af31a3bb697b80836d95e1
-
SHA512
ad11dc15094528bcb4e27bdcab3441217db77755820f8daf4c9cd37bd73d7202ea7a7a34ad85657544281e1a6ff121b68210e3e6046b595862fa71c68e96d1ae
-
SSDEEP
192:zP4/eT1BAiXL4rkjeeazc9gcIu6BLPSoFoM/pipA41YgLzo:b4/eRB91uz4gcIzBL7rR2A+Ygzo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6343dc193359ea2cf63e6055d300eca9
Files
-
6343dc193359ea2cf63e6055d300eca9.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE