Static task
static1
Behavioral task
behavioral1
Sample
6af55d622cd7fb66448a679228d1ceac.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6af55d622cd7fb66448a679228d1ceac.exe
Resource
win10v2004-20231222-en
General
-
Target
6af55d622cd7fb66448a679228d1ceac
-
Size
11KB
-
MD5
6af55d622cd7fb66448a679228d1ceac
-
SHA1
084a43bea51b24e410f3309f6497fc39dedaef49
-
SHA256
c095b1a37d36e9e1d0de1df52506c4eaa9c30fd720eee27e95704c5b9a1094ed
-
SHA512
f6a767339abd61c87a3ce1202aa872aae166eb12e6159690b9b4a6fd2bf14f0302f98d397fbfe6b8e2713501e569090e662f04ad01ac71ad9d6009d3d3da62ff
-
SSDEEP
48:6bk60eEthIlqISpejjyKJ3EDHmgC28J1rXoi0lPo853uaqlIdSTf9Bv7:C0eEISpOjyKJdgCB1YE85A6dSBd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6af55d622cd7fb66448a679228d1ceac
Files
-
6af55d622cd7fb66448a679228d1ceac.exe windows:4 windows x86 arch:x86
a8ad693bf3b8adc2d596efb901f48374
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontFamiliesW
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 326B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ