Static task
static1
Behavioral task
behavioral1
Sample
6fee4cca2dd1329c1f4e1a075ecea9d9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6fee4cca2dd1329c1f4e1a075ecea9d9.exe
Resource
win10v2004-20231215-en
General
-
Target
6fee4cca2dd1329c1f4e1a075ecea9d9
-
Size
1024KB
-
MD5
6fee4cca2dd1329c1f4e1a075ecea9d9
-
SHA1
19d3870dc6a80392447cb58b529de3e9df53d961
-
SHA256
b12f75396424cf19e73f3ea90cbef62e7ae23ade403d34dcfc73dcee2b011e6a
-
SHA512
ad2e3617cbd168398121464d99ffec01cf72477242732747616458fc40c741cf5eb95c182ab58dbe8abf11dfe47d0fab15fcb2178e169a140e911df46f424251
-
SSDEEP
24576:Y4t13PnauCF3rB44ZqD0hLkY1K9yTv1HQ/we65ZY:Ft9PnauC84ZqD0uYAglBZY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fee4cca2dd1329c1f4e1a075ecea9d9
Files
-
6fee4cca2dd1329c1f4e1a075ecea9d9.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 315B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE