Static task
static1
Behavioral task
behavioral1
Sample
106b953b6a449e1558920f0285f77c80.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
106b953b6a449e1558920f0285f77c80.exe
Resource
win10v2004-20231222-en
General
-
Target
106b953b6a449e1558920f0285f77c80
-
Size
512KB
-
MD5
106b953b6a449e1558920f0285f77c80
-
SHA1
d740e48d1ab24c2196f5888b8f4f80d1f47fa03b
-
SHA256
6081ef7488b81d7b7ec5336c0d0f11a5759af0bb5b74fb7296d349f6bad9f916
-
SHA512
b59e74edc012633f9d98872e25c9f67afcab9d3d06550138372ab73259c4dab681d092deea5d047cde5e55913370d6f9de6c656dbc6518b40a5d985a5d984a3f
-
SSDEEP
12288:CnxyC8xndvpydNi9r5yGNyUR8N9ConacKf7tpe6868akl5bOPPx+tn6SAfNwd:CxYxdCiq5UWapf7tpe68634nFiwd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 106b953b6a449e1558920f0285f77c80
Files
-
106b953b6a449e1558920f0285f77c80.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 804KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 239B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE