Static task
static1
Behavioral task
behavioral1
Sample
6d9493e252537d78c92ad46bd4f7e536.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6d9493e252537d78c92ad46bd4f7e536.exe
Resource
win10v2004-20231215-en
General
-
Target
6d9493e252537d78c92ad46bd4f7e536
-
Size
602KB
-
MD5
6d9493e252537d78c92ad46bd4f7e536
-
SHA1
9388eb09efda2df32e0d33f95c8e77eea185a07f
-
SHA256
5aa1745394013fdfd51bbc0dbaa7b0357ef83cdc3c51b5a82ad354f4f00b8fee
-
SHA512
eb09a4bae1fa340712567090a90c99ab3a4d37c2d7e25ef8f1c1fd49eed19784ae4b6fb5197112bac7b1e28393969005965400749584b8da4a97874dbe84bd95
-
SSDEEP
12288:djIwS9O7kD3KNJkaI+L8XP2T3nv7QY6CMbSNZxSCsISDGfIv51btdX3xtspWoS:Z77kWN2lVXP2T3E7CMuNZx8HPLX3xtsp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6d9493e252537d78c92ad46bd4f7e536
Files
-
6d9493e252537d78c92ad46bd4f7e536.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 708KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 586KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE