Static task
static1
Behavioral task
behavioral1
Sample
6f88ffcb6b230b86f5a3d07e7933c20a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6f88ffcb6b230b86f5a3d07e7933c20a.exe
Resource
win10v2004-20231222-en
General
-
Target
6f88ffcb6b230b86f5a3d07e7933c20a
-
Size
79KB
-
MD5
6f88ffcb6b230b86f5a3d07e7933c20a
-
SHA1
dfc9c98a74cdb6aab61cc76777c9bf37d81bf664
-
SHA256
e423c52331978cf33972222dde9e88c5e35b9f78a1323810f61e085b7d867534
-
SHA512
d537bcc362ef85a43d92886849a0236e9b43c7d423f282f2375496b303ad423ea1f2ca54099f9775f1fe1f652385638347053d1d4844dca28be5a48d3c73cf99
-
SSDEEP
1536:IjxBLypAx3k6Ok8eBBEZf/hwLPQL4IGetf9cDjDkkZ:mJ1BBEZx0P+vVtfMjokZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f88ffcb6b230b86f5a3d07e7933c20a
Files
-
6f88ffcb6b230b86f5a3d07e7933c20a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 659KB - Virtual size: 659KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ