Static task
static1
Behavioral task
behavioral1
Sample
6a8e09de51a820bf36712f1a0765996b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6a8e09de51a820bf36712f1a0765996b.exe
Resource
win10v2004-20231222-en
General
-
Target
6a8e09de51a820bf36712f1a0765996b
-
Size
724KB
-
MD5
6a8e09de51a820bf36712f1a0765996b
-
SHA1
3fbcb29fb05f2ab61d5af7da0c74273b07b41032
-
SHA256
473aebe12b4468548ad71edff67dcfda50a3417c0c58087425acb4851553234f
-
SHA512
0a0b37e9f6779d4dfb946d0cb28f7a74af61e2dd3be1cde743d4350f4c94daf52083e5106d94e53afe9ea91d141e1b8272464476ebbc8e459962a3ec9abcc0e3
-
SSDEEP
12288:WIVdc2s7ZYxuprT48Qzh6z/ej5uWE7yyAlRDmgF8:WIc2stYYRT89EejPDmgS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a8e09de51a820bf36712f1a0765996b
Files
-
6a8e09de51a820bf36712f1a0765996b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
peC Size: 672KB - Virtual size: 672KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
peC Size: 48KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pec Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE