Static task
static1
Behavioral task
behavioral1
Sample
7f6094ebca9d7eaf1b5a72c4dc56e0db.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7f6094ebca9d7eaf1b5a72c4dc56e0db.exe
Resource
win10v2004-20231222-en
General
-
Target
7f6094ebca9d7eaf1b5a72c4dc56e0db
-
Size
18.7MB
-
MD5
7f6094ebca9d7eaf1b5a72c4dc56e0db
-
SHA1
b04b6c0a9f3c201a51510842ead0a70f2b9a929b
-
SHA256
79f5172b9f6c8ef56383d7d33d14df79d060f657e0b3b77812f41e4140e7d9d5
-
SHA512
da8ccdc84bf7c89ca9381a0597372218c93baa66b6682a83e38c14e3d23af90cf73f66e8010635fd056d520042649f7f2989fa030163822f4a7cd76a5b64ee45
-
SSDEEP
98304:vqcWNf1zOIZtGuwl0M02vZ2atEnvqgG2a4f/nY6I3ZmjcVYMTvcb5:vMftEl0M0C22x4f/nY6mkjcys
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f6094ebca9d7eaf1b5a72c4dc56e0db
Files
-
7f6094ebca9d7eaf1b5a72c4dc56e0db.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.XPack0 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16.1MB - Virtual size: 16.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.XPack Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE