Static task
static1
Behavioral task
behavioral1
Sample
6fd68f29e577bae4ca52f6b8a11ae9ec.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6fd68f29e577bae4ca52f6b8a11ae9ec.exe
Resource
win10v2004-20231215-en
General
-
Target
6fd68f29e577bae4ca52f6b8a11ae9ec
-
Size
754KB
-
MD5
6fd68f29e577bae4ca52f6b8a11ae9ec
-
SHA1
b34f60784ca709bafe39d992c7af17cb056a0531
-
SHA256
f013bcd319ab30e6ecd672f31e4af247855a0dd138b235fa7e381241dea68e9e
-
SHA512
77b61c77f9043d89cbeb122dc7709ef63c0ab5c90e644e8a436ac10b26e58943ed2692430aad95ad0ca82663e6dc94ae5e137348cd7ccad35896afcef7ca47c1
-
SSDEEP
12288:AVRmqlDuWng7azsRutgzO6sBwJwj3rmLadfdRbH1WAKtzS9/SKP4O:AVRmRY+azswaO6NJa7CYdRoAKtzS9/SG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fd68f29e577bae4ca52f6b8a11ae9ec
Files
-
6fd68f29e577bae4ca52f6b8a11ae9ec.exe windows:0 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
xicheng! Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 752KB - Virtual size: 752KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE