Static task
static1
Behavioral task
behavioral1
Sample
1e6caaef1a3360e01ab16f04902e2c62.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1e6caaef1a3360e01ab16f04902e2c62.exe
Resource
win10v2004-20231215-en
General
-
Target
1e6caaef1a3360e01ab16f04902e2c62
-
Size
486KB
-
MD5
1e6caaef1a3360e01ab16f04902e2c62
-
SHA1
224eb7b21548accd49442d288926b9ef4b10d430
-
SHA256
7310506f46a98d1af6903d3dba154c0c24dcc09a63481b7f8f9bee67e4722d40
-
SHA512
c4a7031fc5b12d3f0c555e17df237062428dc7fd4cf258e1bd9fe59151f1264969fba8f0a88d424ad7a1bdc4fd19fe058c92ff5fe7b93a5f30409894de498c11
-
SSDEEP
12288:O6zbBOzrx7y8Gzv15SpumnxjtJpdDlw8IZ2GkqMhXhSrUohD:OMj8Gzv18uK9pu8wPMhXhwJhD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e6caaef1a3360e01ab16f04902e2c62
Files
-
1e6caaef1a3360e01ab16f04902e2c62.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 265KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 96KB - Virtual size: 413KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE