Static task
static1
Behavioral task
behavioral1
Sample
6e7a211456ea5d21f00f6efbe980636c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6e7a211456ea5d21f00f6efbe980636c.exe
Resource
win10v2004-20231215-en
General
-
Target
6e7a211456ea5d21f00f6efbe980636c
-
Size
380KB
-
MD5
6e7a211456ea5d21f00f6efbe980636c
-
SHA1
04bf7d8caccca88de80d20f150947e39416b6ca7
-
SHA256
3512efbbd696025302314d0ce3bb133c5e5832e2ff0484ed41db953b9025c310
-
SHA512
369c158c48a31848d19b9beda2061fca97b6d92914a2083bc45542100b0710f89a3d21a967d1a4e55a1fc65294f57cd5fb930f8117d8ba26f1403c18a3e6ca4a
-
SSDEEP
6144:MmfA0QPPdzKoS4DZ3A+E0I8IQB2vI1CDitFuZtzzk7fPxSnyVNck/iPJgsROBeP0:MmLoS493ACIl7vI1kiqHNnyVek/a4Aml
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e7a211456ea5d21f00f6efbe980636c
Files
-
6e7a211456ea5d21f00f6efbe980636c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 30KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 316KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 928KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE