Static task
static1
Behavioral task
behavioral1
Sample
6a0b01dd621998a53c6b758f7dba1424.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6a0b01dd621998a53c6b758f7dba1424.exe
Resource
win10v2004-20231215-en
General
-
Target
6a0b01dd621998a53c6b758f7dba1424
-
Size
512KB
-
MD5
6a0b01dd621998a53c6b758f7dba1424
-
SHA1
5bac37c3ad7a419c5db968142f45d088c263a341
-
SHA256
c90f0cfb3a64c94b1e652bd2755d951a1eaabe2a9da7d0cb5b25528944f27045
-
SHA512
1a4a80f3b51eff96559b73a37e3e4a67c5ceaf83fbdff9f04132fb2b8d76c3f01efdf5ba16b6d31eb0c5204e43b4fea0b533859a1693ea5297b1fa23941e3b86
-
SSDEEP
12288:LZomv2hipCkUpFZI5hiIWHiaqX/J7JW+r5qTY3crWp99:LZoBhiUksyiTCnJw+r5Cmc8L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a0b01dd621998a53c6b758f7dba1424
Files
-
6a0b01dd621998a53c6b758f7dba1424.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 801KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 379B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE