Static task
static1
Behavioral task
behavioral1
Sample
6aa7469b5b99a65e5ae16e2cf72b68c4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6aa7469b5b99a65e5ae16e2cf72b68c4.exe
Resource
win10v2004-20231222-en
General
-
Target
6aa7469b5b99a65e5ae16e2cf72b68c4
-
Size
60KB
-
MD5
6aa7469b5b99a65e5ae16e2cf72b68c4
-
SHA1
97c9707cd4c23061d5387c9f714d2611aa9bbc41
-
SHA256
48daf54fbf0710d4715ab05e1443d6c511f606d45c5362b1597dc12670d1572b
-
SHA512
6178f35005d6a4ce3efc699324fd64e1a63d8f53d6bd43596aba2c2a42a7484f94d13304958fcbc7ebb5773e16b8a370d8b5c9ed1c296e06862faf0d84d0a26a
-
SSDEEP
768:tUgwyV9K6SQO8B7TcSoAQlqS1a/t/7aTtUnpGgGi1GgGCGrGSGbG4GxG6GdGYG5A:+gwyV9K6SJ8eSolV+BkUnbsjJo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6aa7469b5b99a65e5ae16e2cf72b68c4
Files
-
6aa7469b5b99a65e5ae16e2cf72b68c4.exe windows:4 windows x86 arch:x86
5aae5d2be9b15ae1b049587d4efe5c8e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ord517
ord518
ord593
ord594
ord595
ord598
ord520
ord709
ord631
ord525
ord526
ord528
ord529
ord711
ord712
ord606
ord607
ord716
ord717
ord537
ord644
ord570
ord648
ord573
ord576
ord685
ord100
ord616
ord618
ord580
Sections
.text Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 860B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ