Static task
static1
Behavioral task
behavioral1
Sample
6ae09a1cec228e1910a738b859ea9642.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6ae09a1cec228e1910a738b859ea9642.exe
Resource
win10v2004-20231215-en
General
-
Target
6ae09a1cec228e1910a738b859ea9642
-
Size
20KB
-
MD5
6ae09a1cec228e1910a738b859ea9642
-
SHA1
91f8bcec1fc821fc09e52631dc967924cd9db916
-
SHA256
e80942df66c2fdc2e360fa7002efa7edb70bd354cc384c53eea03eb1fc499662
-
SHA512
7ed5e8e64a30216c53bad028388bbdafa6d9f9737d668330fae54ffbd0bb425c987310fc9a887bbbd309adc3b745bd04aaeffa79fdfa7e9c9d0b387473a69a63
-
SSDEEP
384:weQKjZIWeRAOMG8hE98bFJ0ryQMwN6iTLu6CgS5Xm3LbIpQU9mG:h9SWW/r8htbj6vnLUgS5Xm3LbIOU8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ae09a1cec228e1910a738b859ea9642
Files
-
6ae09a1cec228e1910a738b859ea9642.exe windows:1 windows x86 arch:x86
0346fd70ea9ba8b02d29dec9e2e38f9e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
Options_RunDLL
ExtractIconEx
CallCPLEntry16
StrChrA
SHGetSettings
SHFileOperation
StrStrIW
user32
CreateCaret
EndPaint
GetActiveWindow
gdi32
CreateColorSpaceW
Escape
FillRgn
GdiFlush
GdiPlayJournal
CreateCompatibleBitmap
DrawEscape
CreatePen
GetBkColor
Sections
����t Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE