Static task
static1
Behavioral task
behavioral1
Sample
206cc7997ff5cc9e4d3aeb96b9bcabd1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
206cc7997ff5cc9e4d3aeb96b9bcabd1.exe
Resource
win10v2004-20231222-en
General
-
Target
206cc7997ff5cc9e4d3aeb96b9bcabd1
-
Size
836KB
-
MD5
206cc7997ff5cc9e4d3aeb96b9bcabd1
-
SHA1
334b12c23c8c51ca87fd4dc6f5f5ecc75507e089
-
SHA256
4dc269c141556b4f26a9103a707faef7105d3ac93453e853289424c6927d8830
-
SHA512
9ae9f9e830b6b3de6f37920f79437641846fc708ec84293ae82de58f78ec4bd61ce204022a42e043e45621e8f8dc3784138150c1c2a5afd4258e0f059f970d59
-
SSDEEP
12288:NWpUhPQFrUo+03/DipGBAwSfxL/2Dc3jDLLmt0LDQewsAjR1:NWvWL0vbiaewsAjL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 206cc7997ff5cc9e4d3aeb96b9bcabd1
Files
-
206cc7997ff5cc9e4d3aeb96b9bcabd1.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c2r Size: 512B - Virtual size: 300B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ