Static task
static1
Behavioral task
behavioral1
Sample
6630b60528f4a24529e4be55b22579ee.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6630b60528f4a24529e4be55b22579ee.exe
Resource
win10v2004-20231215-en
General
-
Target
6630b60528f4a24529e4be55b22579ee
-
Size
193KB
-
MD5
6630b60528f4a24529e4be55b22579ee
-
SHA1
d24f93d6d612c34d6579919dd50df91f0cb51fac
-
SHA256
c1f427200c8798f5070a14ad4b82811454a2c8a738a1ec2c28c8967992752c03
-
SHA512
45edebbd93a5b6dd135a997f35a83a80bf3491c9ddbdd7701ede8b9cbdfc95eb43848d4f07105eaba4617a0f8f1ba8df062b30015548e848191d788223934080
-
SSDEEP
6144:t3nLXeNOLlCY8c2VogmEMRyYODYfH3mK1:t3LusLlCnc2c7ZgSx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6630b60528f4a24529e4be55b22579ee
Files
-
6630b60528f4a24529e4be55b22579ee.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 444KB - Virtual size: 444KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9.0MB - Virtual size: 9.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ