Static task
static1
Behavioral task
behavioral1
Sample
6fd0a224557b3787b78c9f72638c439d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6fd0a224557b3787b78c9f72638c439d.exe
Resource
win10v2004-20231215-en
General
-
Target
6fd0a224557b3787b78c9f72638c439d
-
Size
3.0MB
-
MD5
6fd0a224557b3787b78c9f72638c439d
-
SHA1
cffe8c36ec126b1ab3d01518b1f44fb073731089
-
SHA256
75fb87665165fbc46f2d32fb551a6b90763c9cf14c83bccf9a6780d1d4765b0f
-
SHA512
fb501db7602e976547efdb7f45fecd05dbc0bdad6d6fbdc2a598eb0f95713c4ad7c45f370f125d82b52ac028d78f09a1f526efde17717902da89f5202752a1be
-
SSDEEP
49152:B0XbHJUfU4ECRJj7qieZTyXpOmkzZhbhEQdOKvUOJDi:WbpUsy3SZ0GTuQdOK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fd0a224557b3787b78c9f72638c439d
Files
-
6fd0a224557b3787b78c9f72638c439d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 734B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ