Static task
static1
Behavioral task
behavioral1
Sample
f6018306970d394d69c55598d631fc54.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f6018306970d394d69c55598d631fc54.exe
Resource
win10v2004-20231222-en
General
-
Target
f6018306970d394d69c55598d631fc54
-
Size
27KB
-
MD5
f6018306970d394d69c55598d631fc54
-
SHA1
0ca5558d6826096b345eab6399180d491c22f067
-
SHA256
4fd5459c062ccf9500209b8c3c30be05de7563afeaf58b0213bac31a0687cf46
-
SHA512
48fad7a79cd0e4764ac7bd57b79911189cb9e3a5a8ee2bef9f92b502f7dff7e6634d8bb7a4193d207d70e90344a665c74d008a4582c3e55820821d2ae37cf04a
-
SSDEEP
768:cZWk7NiVK3KYz7bOh/wmVRT1H3ttJbm7TEQk:uTNbaiE5XnJy7dk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6018306970d394d69c55598d631fc54
Files
-
f6018306970d394d69c55598d631fc54.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dat6 Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE