Static task
static1
Behavioral task
behavioral1
Sample
6fa15d5ed6741ef58694accc8ca5a987.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6fa15d5ed6741ef58694accc8ca5a987.exe
Resource
win10v2004-20231222-en
General
-
Target
6fa15d5ed6741ef58694accc8ca5a987
-
Size
2.1MB
-
MD5
6fa15d5ed6741ef58694accc8ca5a987
-
SHA1
6782233898aaff4e464b69e81fc427a055ae2c44
-
SHA256
f09a9208615fb6a83cece697bcc9789c9f9dd8d0ca69f4eedd31cff1969fae9b
-
SHA512
4ae959f1897ce4c315ef64403dac94c5d354e5fc2c8483b8392d4ce27d91f8cceab0de7e714eb197b464e44dd92ec32f468e7a12aa307d8f4d14d84d4a8a84d5
-
SSDEEP
49152:yC56CWopS24JuxD53sjg93xvBnxOJ67zWYNcD+MliMI/:yC56xopS28k9PnxOo+K9MI/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fa15d5ed6741ef58694accc8ca5a987
Files
-
6fa15d5ed6741ef58694accc8ca5a987.exe .vbs windows:1 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.flat Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 393B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 564B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE