Static task
static1
Behavioral task
behavioral1
Sample
6652f7327543e9934189c34f29ae1f18.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6652f7327543e9934189c34f29ae1f18.exe
Resource
win10v2004-20231215-en
General
-
Target
6652f7327543e9934189c34f29ae1f18
-
Size
907KB
-
MD5
6652f7327543e9934189c34f29ae1f18
-
SHA1
e82bb0e7fa4ec39b3c3c58f07823d8f47a00111c
-
SHA256
55118e23a8ac73cc4f1d61c112862fb819c35aab8397e4709975a906c1a34274
-
SHA512
de8da854ae35d92c267de1006bd920e0e8f082340063dc1e56c979673d77f5d9cae73a5c6e78db73318b5086fe2a49ffe3aa86a463876064b7ae362ada5cbf99
-
SSDEEP
24576:5rwXEtWkzoEnVzQxxalW8Y2ZvA9pUv6vw3JUAzKK77hIy+Ra/ZS1:x0EcSBVzQxM/I9eSvwVmIhIyCgS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6652f7327543e9934189c34f29ae1f18
Files
-
6652f7327543e9934189c34f29ae1f18.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 720KB - Virtual size: 719KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ