Static task
static1
Behavioral task
behavioral1
Sample
6beb94a34f59e57c0bb38e6897c7fdb0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6beb94a34f59e57c0bb38e6897c7fdb0.exe
Resource
win10v2004-20231222-en
General
-
Target
6beb94a34f59e57c0bb38e6897c7fdb0
-
Size
753KB
-
MD5
6beb94a34f59e57c0bb38e6897c7fdb0
-
SHA1
6bb4f53e98568d7bc8504746f3a0d2446d0e82f7
-
SHA256
75eb304ccdc7ab2f3cdccd8f92558a38b68465e1591405a2656cc45df1a94784
-
SHA512
c428bb11858f5b9cc7c2ad0ed37822ad50d763097239b2e43508130e98be4d4620ac0054ad7d8c552d6d8a9ea594da32dbdc34bf3f3d8461f33127a755662b35
-
SSDEEP
1536:4CqlwmQ+SGQnP3N15nMnX1CZgv1w1E1S87R:0nSBe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6beb94a34f59e57c0bb38e6897c7fdb0
Files
-
6beb94a34f59e57c0bb38e6897c7fdb0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 956B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ