Static task
static1
Behavioral task
behavioral1
Sample
6a859d9cb7e32a8b834d439c9d810ad3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6a859d9cb7e32a8b834d439c9d810ad3.exe
Resource
win10v2004-20231222-en
General
-
Target
6a859d9cb7e32a8b834d439c9d810ad3
-
Size
224KB
-
MD5
6a859d9cb7e32a8b834d439c9d810ad3
-
SHA1
0372329f2cd687d92b9b174e3cbb586b0ea3e90d
-
SHA256
e911546e9e81c7ef9cde3c373272173b44401284ad7733c521a188ecc3f64fe4
-
SHA512
21e1c4cc619266ef240b5203eb7ebda2def4b0699bfecb04d59b64457ddb8507393c124aa9337ac546e93c1dd8b2d5d61023666c9d8ab979220c548bd1451a5a
-
SSDEEP
6144:n0/iIntSmDnCTQEjqbgtWKdC9UGy+DTPL1vMi3AYXZr:n0/zSknQPmbFlXTPhvHAU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a859d9cb7e32a8b834d439c9d810ad3
Files
-
6a859d9cb7e32a8b834d439c9d810ad3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 276KB - Virtual size: 274KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ