Static task
static1
Behavioral task
behavioral1
Sample
f6f4b0ef67c244daa7bffe1ad7f264c1.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f6f4b0ef67c244daa7bffe1ad7f264c1.exe
Resource
win10v2004-20231215-en
General
-
Target
f6f4b0ef67c244daa7bffe1ad7f264c1
-
Size
11KB
-
MD5
f6f4b0ef67c244daa7bffe1ad7f264c1
-
SHA1
a63b9958823d0b2d0009bc56e7f9f15fd8855c01
-
SHA256
795c7900b9e74798e982073e4a4c67c2d7c1df3ad7c89155a1b1e4efa14310c0
-
SHA512
96aa887473dc9eebbf19faec51c55794f628d8cc88f2b0516a00ac1addaffce21f00bd85b2b8046f05621d75b71973be6d009927a14247a2ebf4c679a8d68910
-
SSDEEP
192:tnvhFzLKJVDlSCvhmg2z670qMdzqVz9kNSBlH6MLkFcyT:EJpYCvhR2zLmESuMOT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6f4b0ef67c244daa7bffe1ad7f264c1
Files
-
f6f4b0ef67c244daa7bffe1ad7f264c1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ