Static task
static1
Behavioral task
behavioral1
Sample
f6b8e1c2b3ad400b9b67bbaab3412978.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f6b8e1c2b3ad400b9b67bbaab3412978.exe
Resource
win10v2004-20231222-en
General
-
Target
f6b8e1c2b3ad400b9b67bbaab3412978
-
Size
97KB
-
MD5
f6b8e1c2b3ad400b9b67bbaab3412978
-
SHA1
666031a19b67ca2403abe46808d94af454338b9a
-
SHA256
6549e3293fc40f0777814393432efda35b3fbc09adbef8745c438c9cbe275efd
-
SHA512
3ad3b12389a000b737f00ac9018a175ad64c476da02dffb66792d0d453ef9aee5a5e12a0816cc63c88926598261eef55edd9649dcf357a3eab3c44a5ea7fc9ab
-
SSDEEP
192:zB4tThYzbK/yTHA+Rdb1e/e/WbGddbF1fngGx63NwL:94phmbeDqdb1e/evdx1Hx63m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6b8e1c2b3ad400b9b67bbaab3412978
Files
-
f6b8e1c2b3ad400b9b67bbaab3412978.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE