Static task
static1
Behavioral task
behavioral1
Sample
6017d65e3bb583b3bb7c4475f69f18b9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6017d65e3bb583b3bb7c4475f69f18b9.exe
Resource
win10v2004-20231222-en
General
-
Target
6017d65e3bb583b3bb7c4475f69f18b9.exe
-
Size
76KB
-
MD5
6017d65e3bb583b3bb7c4475f69f18b9
-
SHA1
db63db898c3b15f575bf76911c566330d03da482
-
SHA256
75ebeaecaf01a5c6b5ab98e53bfa253de769d98a4d4204f7088ae59c22da8061
-
SHA512
16777456221b4a5d7eabd765f5e5525f643e3ee279f689dce60d97b781bba4cdee9a7bac8256a497a7a8bedf324a7b7ca0e5b8cc94c6c2280bedab7ae207d40a
-
SSDEEP
768:LWQaqeZqr1szAWS7WbQiEJ4MPVzT4vWTDtnvOEKu+n+aP2l8orbwhY8:LWvZqr1s1kPZ/m5uWOLrb2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6017d65e3bb583b3bb7c4475f69f18b9.exe
Files
-
6017d65e3bb583b3bb7c4475f69f18b9.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
BRAT0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BRAT1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BRAT2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE