Static task
static1
Behavioral task
behavioral1
Sample
6eed2f0506a3c50997bc292406ff592b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6eed2f0506a3c50997bc292406ff592b.exe
Resource
win10v2004-20231222-en
General
-
Target
6eed2f0506a3c50997bc292406ff592b
-
Size
678KB
-
MD5
6eed2f0506a3c50997bc292406ff592b
-
SHA1
48e46f1bfc646a80b5ee2c1c8b4190f7c8b6fbc5
-
SHA256
04e4108a094dab5491087f0d76ba04e231c5c4d099765415b7710b31e643e118
-
SHA512
79655d668e00b5827e7793937c8ebe37764ba269959a2944f022bf9fd9c5ef3364a1beafc569a7890a63e05123f2a4fe8cc952b6a7e90f6183a455305de8affb
-
SSDEEP
12288:Pr3pukh0kLmub9agxZx9ZOm6bnCfdQnKNJnqQPI+Qv3HWXpMNVv:Pr3YQUm9pZOmDFMKN8kI1v3WXp6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6eed2f0506a3c50997bc292406ff592b
Files
-
6eed2f0506a3c50997bc292406ff592b.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ