Static task
static1
Behavioral task
behavioral1
Sample
6a581a382237746574b93103707676e1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6a581a382237746574b93103707676e1.exe
Resource
win10v2004-20231222-en
General
-
Target
6a581a382237746574b93103707676e1
-
Size
59KB
-
MD5
6a581a382237746574b93103707676e1
-
SHA1
abcfd70c3f692f02af319c1c7307c073e6186448
-
SHA256
cfe5d9da82599565df15dd662a6ac90b5b6f49c34cbe57ad4328c21039a4cdde
-
SHA512
f8572da02099190a905d62c44cdd493f5d9a01e4e39a6da0eecc16fc6fbce0bb064835cae47b8d69313abf245dfe2838016a348464ac0041b1dd2d6eb2f4aa1f
-
SSDEEP
768:QhNPMjvhqZKhy2BFz9JtCqSNL+sJh9/vvz/fcr7P6T2SLJYW87QGfZijZ42:QQMZKhPXzgB+gh1b/fcrkFkZBijm2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a581a382237746574b93103707676e1
Files
-
6a581a382237746574b93103707676e1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 464KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XOR Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE