Static task
static1
Behavioral task
behavioral1
Sample
6803348246fa06335e14e7959950da66.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6803348246fa06335e14e7959950da66.exe
Resource
win10v2004-20231215-en
General
-
Target
6803348246fa06335e14e7959950da66
-
Size
323KB
-
MD5
6803348246fa06335e14e7959950da66
-
SHA1
681cccb5789ad800eb77f8bcee0ebf528ccad2e5
-
SHA256
5fe43fc0d83cefb2bd6d0959328a8692b21baa539e3d95d9cabf414a7c8ce6ce
-
SHA512
c07f1fc83b88becb9ba8a8d29bc682c68dacf2a5179250f907d34f91a5f9c73ba28eb0d7895e1c065066a1cd7de0540940adee78abb3aed6f4662a46b3c89481
-
SSDEEP
6144:/xrEmcTGAdTulF59LooNORLYVTyqNsabnyl6SzkNiREpKgfgz8mSY4:+sFF59L1NORLYwqN9IEpKkE4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6803348246fa06335e14e7959950da66
Files
-
6803348246fa06335e14e7959950da66.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE