Static task
static1
Behavioral task
behavioral1
Sample
6a569a3c64a774f58f57e94c738a1dbd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6a569a3c64a774f58f57e94c738a1dbd.exe
Resource
win10v2004-20231215-en
General
-
Target
6a569a3c64a774f58f57e94c738a1dbd
-
Size
908KB
-
MD5
6a569a3c64a774f58f57e94c738a1dbd
-
SHA1
4fcc067d9f25f7f3ef1e418351984c4c4c713197
-
SHA256
dd5878a20fdec10bd936e1cd0cfd0fe49c8e316973e9d8bf9d1bed1fd56edafe
-
SHA512
f028a6ab74d8c210bb8a87bb299e1042314f4596e27ee829f9eb894b06d247633cd1d2e0815661e35cbbb256770bd280099312279511eec1faeb0f58bb5d92c5
-
SSDEEP
12288:F2yeroqd2YbmVB7zzVbTuJpVRLg9vea8t0XU5qBIN4e5zHI6CI56o96HPJBlUE9b:cfIYbmV1+L+veba+7ZNHp9wWEIN0ox2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a569a3c64a774f58f57e94c738a1dbd
Files
-
6a569a3c64a774f58f57e94c738a1dbd.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ