Static task
static1
Behavioral task
behavioral1
Sample
6bfa4059e5d75bb42bbba4d572cbd8b1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6bfa4059e5d75bb42bbba4d572cbd8b1.exe
Resource
win10v2004-20231215-en
General
-
Target
6bfa4059e5d75bb42bbba4d572cbd8b1
-
Size
164KB
-
MD5
6bfa4059e5d75bb42bbba4d572cbd8b1
-
SHA1
ee6662eb8894acf98a0c77e941e014a9071e8c73
-
SHA256
8c2147df3b577b02ee9642b1588ab7382ed3a8d085c46faebf483f2900e614d2
-
SHA512
11cec5bbb839fb4329a6e71e2c177661312494cbcda4c07e25d6fb9e913cbae165a9dae0280a0489ca030d7112c0b937501263df23f5e033046f1ffaf5b88a2f
-
SSDEEP
3072:3JmWukzuZa5+v+5R1Waauao89fa5xi+Y01H3f:CkzuoXR1Waauao75Mw3f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6bfa4059e5d75bb42bbba4d572cbd8b1
Files
-
6bfa4059e5d75bb42bbba4d572cbd8b1.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE