Static task
static1
Behavioral task
behavioral1
Sample
006cd7a5f46ad56cfecf9537973f6816.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
006cd7a5f46ad56cfecf9537973f6816.exe
Resource
win10v2004-20231215-en
General
-
Target
006cd7a5f46ad56cfecf9537973f6816
-
Size
82KB
-
MD5
006cd7a5f46ad56cfecf9537973f6816
-
SHA1
88e49d4f82dd45613ed669a9f80df76d85669331
-
SHA256
ea531852a46149915ad59dd623a68b6e67eb3c0e6251b02ab3d67b077d384bd0
-
SHA512
438e7b5c868aec1e3a38c9c7d11b7d991ee2d0b79c4ec67b328c9a27eac96f2677cbae3d42acd65e3333159b95c895be7d1b31f90268b74a91a8b8aa9556eec1
-
SSDEEP
1536:P0PSg/gHM+ImxJ6twcA59a2buWNfpYyX/oTQOV8yxXYw:P0Pgspyc+ZpNXQTQU8yx3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 006cd7a5f46ad56cfecf9537973f6816
Files
-
006cd7a5f46ad56cfecf9537973f6816.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ