Static task
static1
Behavioral task
behavioral1
Sample
6e98d694cf5b301b429a4eee72df3522.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6e98d694cf5b301b429a4eee72df3522.exe
Resource
win10v2004-20231215-en
General
-
Target
6e98d694cf5b301b429a4eee72df3522
-
Size
40KB
-
MD5
6e98d694cf5b301b429a4eee72df3522
-
SHA1
e173f93d19797ef1b022c629028439dd5b725f70
-
SHA256
a547d806520ae251b7e0772a706a0450a61dae1d9966cd35ff463766e2adbca9
-
SHA512
d772314234d3b4cf5471787595e13d60749e4cd13e0b4bd3e411d7a2762293904bbe0ad8db134c70b694a9f019386c1203b05d3daa2b60958958b29028cc6c40
-
SSDEEP
768:C1E7ORsmVKu8xZRPD+zxDEtqenghx97tN8w8bLrzuclrJ:KdsmRzhxJtidVll
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e98d694cf5b301b429a4eee72df3522
Files
-
6e98d694cf5b301b429a4eee72df3522.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 39KB - Virtual size: 985B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE