Static task
static1
Behavioral task
behavioral1
Sample
006fa27cf73772d523aff05b3756d35b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
006fa27cf73772d523aff05b3756d35b.exe
Resource
win10v2004-20231222-en
General
-
Target
006fa27cf73772d523aff05b3756d35b
-
Size
167KB
-
MD5
006fa27cf73772d523aff05b3756d35b
-
SHA1
3b8259532a553da1c38e58a880154f4cd5b18958
-
SHA256
789db97fb4ef3d9674498ad0bd3f555ec8d51c6e19866d7524ffec0523de6a55
-
SHA512
8a0696acfd74b72af21fd3d2d52051808a475d877e18713c3c6bd19fa4a847b17aa929670b2e2de4f133abdf1fbc281d4a626b21fcd8e167b872a271918c2ef9
-
SSDEEP
3072:YJs18jwBJOMs7nh0Q9R0gHKEipxJpzFAPrd/sYL4rTEwWZfsVsn:Ikts7h0QAyKrpxL2Prq4CTEwWZfysn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 006fa27cf73772d523aff05b3756d35b
Files
-
006fa27cf73772d523aff05b3756d35b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
���0 Size: - Virtual size: 740KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���1 Size: 413KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE