Static task
static1
Behavioral task
behavioral1
Sample
6f054ae9e6a61df0fed37d7de4d00aa8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6f054ae9e6a61df0fed37d7de4d00aa8.exe
Resource
win10v2004-20231215-en
General
-
Target
6f054ae9e6a61df0fed37d7de4d00aa8
-
Size
1.0MB
-
MD5
6f054ae9e6a61df0fed37d7de4d00aa8
-
SHA1
f5f953d0a883e307a8bf71e1c139746ffaaff90e
-
SHA256
281c77a86947443a85bdebf1472457e93d94a213f5866c2ca967d437f89cdfc8
-
SHA512
744b920fbddf6dcc7f8d588924f13744d72cb2e3f8aa33be2943935a12f0177759d8bc4e1d363052e4a3766fc4481b359cfe57e8da2765f83942c7a4c5842e14
-
SSDEEP
12288:UZWtI6RkeeZJys73dOvXDpNjNe8TOB03erQZb+md4w1U4uyiYF+dnKV2:UuhaeeZJ8NI8TOaerQZb+md4wmeiVdKU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f054ae9e6a61df0fed37d7de4d00aa8
Files
-
6f054ae9e6a61df0fed37d7de4d00aa8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ