Static task
static1
Behavioral task
behavioral1
Sample
6b36699e95d762739a45ecd3f4932046.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6b36699e95d762739a45ecd3f4932046.exe
Resource
win10v2004-20231222-en
General
-
Target
6b36699e95d762739a45ecd3f4932046
-
Size
1.4MB
-
MD5
6b36699e95d762739a45ecd3f4932046
-
SHA1
472e5f11c9a50b95a4aa111f3a420dd25e6a5c8e
-
SHA256
616380d134082f41ea8124ada065c5e27f6788994dd591697af3e2caffe3e9be
-
SHA512
0e073e47266deedafee4d94194c456bedac43c45068203953ca23af5c7f1dcbeb0ad3e3fca21551d9e4179ddd687abbe12bf11f19537bc8a6b881fb42bc71578
-
SSDEEP
3072:1GKU9qjqXS/9D3YJAVpbLzjs9+9ebaZQwwiUfB0VlXNvat:kFXS/9D/vnMbUQwcqvat
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b36699e95d762739a45ecd3f4932046
Files
-
6b36699e95d762739a45ecd3f4932046.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
D0�k�� Size: 384KB - Virtual size: 384KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3�K����� Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE