Static task
static1
Behavioral task
behavioral1
Sample
6385ee6c9a3f3c1d882080d0b0fbfba3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6385ee6c9a3f3c1d882080d0b0fbfba3.exe
Resource
win10v2004-20231215-en
General
-
Target
6385ee6c9a3f3c1d882080d0b0fbfba3
-
Size
70KB
-
MD5
6385ee6c9a3f3c1d882080d0b0fbfba3
-
SHA1
59884b4a27cdfce8e7b6d51277391eabf7d8d28c
-
SHA256
f2ec400ffe4da2897dba50419bb4cdc80146ca65b2dfeaa70d0119c4b679accc
-
SHA512
e9d83517d38e49e850badc4720ee7fee7ff0da9d284b5cbb575183a28c7708d3774ccb9b044cfd260e2bbb28fa09633b06f284410c49e4b1f0506b5212c541c4
-
SSDEEP
1536:iprEYkQWH0uyjGttxauLd3teirrtYo8HFmd1l6+xZYJ+43Sl:WrEYwUDmyuLd3UirWoFl6qZoNi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6385ee6c9a3f3c1d882080d0b0fbfba3
Files
-
6385ee6c9a3f3c1d882080d0b0fbfba3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE