Static task
static1
Behavioral task
behavioral1
Sample
6f44b75ebcb35e7c6f7d1eca273a2cdf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6f44b75ebcb35e7c6f7d1eca273a2cdf.exe
Resource
win10v2004-20231215-en
General
-
Target
6f44b75ebcb35e7c6f7d1eca273a2cdf
-
Size
209KB
-
MD5
6f44b75ebcb35e7c6f7d1eca273a2cdf
-
SHA1
dc3226e832b9fefb5903fd08aeedfcfc6ae31e0e
-
SHA256
e26b839087783fd8d74168581135c4fbfa8198a625dc54692218448327fe4d21
-
SHA512
ae768952333f64076ff7e9704af649c25151496df20878a3e07c4209a532e538ccc55015849f194f806cfa656caa5620cb63938749c2d7f4b1f1b956bca6c985
-
SSDEEP
6144:MPShovHaCo3aoCA6wvP6bQ7yMP+DE827lG4jTh:U3HamoF76b7MP+Dd2RJB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f44b75ebcb35e7c6f7d1eca273a2cdf
Files
-
6f44b75ebcb35e7c6f7d1eca273a2cdf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 57KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE