Static task
static1
Behavioral task
behavioral1
Sample
f6e38d791e02945b8b41ca748d81f2f1.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f6e38d791e02945b8b41ca748d81f2f1.exe
Resource
win10v2004-20231215-en
General
-
Target
f6e38d791e02945b8b41ca748d81f2f1
-
Size
1.2MB
-
MD5
f6e38d791e02945b8b41ca748d81f2f1
-
SHA1
921e80ea398fd763a04f5755eb52a246fb3dab49
-
SHA256
57c9ccf5d6bfbac4b9a455f8d0b0183ed1581f38088b1f8cdb91e41986e80406
-
SHA512
240784d2ef74941ecb50efa874429dbdf78b31e3eecd0db5ed1b3a358b5225aa2a5d107ec6e4ca92336fd27b88c542a8d35e3187c6313c8b06150b40fca917d6
-
SSDEEP
24576:gz5px7lbeJfYVcisyzErAjehjV6KLbS0PdL2Gwk0s0nQT:gz5pJl/rz/jeZVFbTdL/N050
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6e38d791e02945b8b41ca748d81f2f1
Files
-
f6e38d791e02945b8b41ca748d81f2f1.exe windows:5 windows x86 arch:x86
f707016e56749c2d908a4fd948beebbe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32 winmm
GrayStringA ��
Sections
.text Size: 424KB - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 736KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ