Static task
static1
Behavioral task
behavioral1
Sample
6aa5ce0409b6786586b5896ad9536af3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6aa5ce0409b6786586b5896ad9536af3.exe
Resource
win10v2004-20231222-en
General
-
Target
6aa5ce0409b6786586b5896ad9536af3
-
Size
76KB
-
MD5
6aa5ce0409b6786586b5896ad9536af3
-
SHA1
1b6985b064adc6a0e26fdfc6e79528dc8efc276d
-
SHA256
86309d2354187ef0e30c2127c5de3d034f758fc44063780f9f6c1df54d43e882
-
SHA512
9f8e54e31ee74313afb9d26d928e2e61d69ae985780e0611e694e001053b70792bf21ff3c65ccf797514df1489b80906c3091feb4acb43b4c66bf0cb4a75dc4b
-
SSDEEP
1536:kx9999E6cyhAfUSfOsMIdMRMWQS4d0ap0BWFH6ljEErxTWDTMqhGKYIZTET8x:L6rufUtsMzRySY30BKOjBkMqhGKZTbx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6aa5ce0409b6786586b5896ad9536af3
Files
-
6aa5ce0409b6786586b5896ad9536af3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE