Static task
static1
Behavioral task
behavioral1
Sample
6ecc4f2ee3c81a15cb8ef527df327dd0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6ecc4f2ee3c81a15cb8ef527df327dd0.exe
Resource
win10v2004-20231215-en
General
-
Target
6ecc4f2ee3c81a15cb8ef527df327dd0
-
Size
916KB
-
MD5
6ecc4f2ee3c81a15cb8ef527df327dd0
-
SHA1
9cf1f5054137a3b8a720b3e6c7e501c0cc7cc839
-
SHA256
d3a726dd41c44b825eea7e973c8efc3af2418e481d8eabad3a11bee31ca39915
-
SHA512
9a04e15f5e5986396e84d1dfe6c44d48bfecc1083899239ad3881e8197bbbfdcf3025688e84092fff003dcecdf1ab61d7740aa40f86f6f3baea53ad2b74b4406
-
SSDEEP
24576:4HEbTHjOB8Kvw9Vo2J6ueVaTPfzjcTPZu3:4k/jOq/PfsjI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ecc4f2ee3c81a15cb8ef527df327dd0
Files
-
6ecc4f2ee3c81a15cb8ef527df327dd0.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 321KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rhkv Size: 571KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE