Static task
static1
Behavioral task
behavioral1
Sample
06b7a5ba58fe4d7afaf1df217579617c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
06b7a5ba58fe4d7afaf1df217579617c.exe
Resource
win10v2004-20231215-en
General
-
Target
06b7a5ba58fe4d7afaf1df217579617c
-
Size
292KB
-
MD5
06b7a5ba58fe4d7afaf1df217579617c
-
SHA1
b3d8aa78227eccc36302626af3894ecff5dec586
-
SHA256
dbd9de04723edb351b66e98e3c47121941a28b00aafaa5b27eee8af3f3913a74
-
SHA512
83d29ccc8348e617a9d96641d83656d42172e48deb3ba3f5e237561f1200a1632334b9f7f94fffb651e4c1b963c8ee0a9493427899cfa56e66ed49b5e3244305
-
SSDEEP
6144:Lxcd/1OeZcN3vIoqS8EvnizEsxS1fK/VMIwXDCbtx7M0tWGWPB:tcrOeDpEvnWefgVzt7V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06b7a5ba58fe4d7afaf1df217579617c
Files
-
06b7a5ba58fe4d7afaf1df217579617c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mackt Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE