Static task
static1
Behavioral task
behavioral1
Sample
6364c735a7cdfb73a79f1e12b81e0637.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6364c735a7cdfb73a79f1e12b81e0637.exe
Resource
win10v2004-20231215-en
General
-
Target
6364c735a7cdfb73a79f1e12b81e0637
-
Size
23KB
-
MD5
6364c735a7cdfb73a79f1e12b81e0637
-
SHA1
d0378dbe26039d87085128625b93745ee92a3fa6
-
SHA256
b0db36a38a157ac375a17513df967142b9716ea3d18fcf8b6fe3ea3a3bffa1ad
-
SHA512
a02a4c26dac1481fb2596c73d3e90537b5c12b7a9ba57bc5db9610f1411d3dd84f5269d3aa2582e4d7d2e5cd2366fb9346f036fa721034865a94d34ba1e55691
-
SSDEEP
384:AFgFFgNN9kqf0geyQkw/3ZGpRd6hrQC2Nr8PWKBK62VNeLR7iWBX6PaFl488ws3X:A2FgNNCqf0geyQTGpRBCSr01KcLR7t0D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6364c735a7cdfb73a79f1e12b81e0637
Files
-
6364c735a7cdfb73a79f1e12b81e0637.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
[CUG0] Size: - Virtual size: 50KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
[CUG1] Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
[CUG2] Size: 2KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
[CUG3] Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
[CUG4] Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ