Static task
static1
Behavioral task
behavioral1
Sample
6aabd8cd55f5a12288e349e3aaaebd90.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6aabd8cd55f5a12288e349e3aaaebd90.exe
Resource
win10v2004-20231222-en
General
-
Target
6aabd8cd55f5a12288e349e3aaaebd90
-
Size
385KB
-
MD5
6aabd8cd55f5a12288e349e3aaaebd90
-
SHA1
8285c0f4c4fecae60e403dbedad4c8321e47f452
-
SHA256
e22ba2b08117a3154203fcbe007c54e8116d032df3ab3577fa553e356522fe03
-
SHA512
077e6ea609fd221ffe773d4dac62a7f0e5e1a3b57c5c4005b7a2395213d250db932c9bd9988538d67e79bf87145609be2332e44479037bad3dacdf2cf066ed59
-
SSDEEP
6144:++sSIPFgGoU0Kt4DKUOLGW0P/xSiT74R3X7a6hLkUJ0mfv29TSyBmUl:pePFgGo0tWjQCwiP4RHnJdqOmma
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6aabd8cd55f5a12288e349e3aaaebd90
Files
-
6aabd8cd55f5a12288e349e3aaaebd90.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 315KB - Virtual size: 314KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ