Static task
static1
Behavioral task
behavioral1
Sample
6444c112d8ead1762ef67a3bd5d0871d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6444c112d8ead1762ef67a3bd5d0871d.exe
Resource
win10v2004-20231215-en
General
-
Target
6444c112d8ead1762ef67a3bd5d0871d
-
Size
82KB
-
MD5
6444c112d8ead1762ef67a3bd5d0871d
-
SHA1
2fba64f181175d948958ff6281718a95f6017cde
-
SHA256
94f365cb355d7a7360bbd02fce7d4711842efcdb8e8711749183a4c9a748f56e
-
SHA512
5803656e7e2c3d1c6f6482ec24057cb5a0b8e09d9e8633c033006b3e7318f1821f07e1bdc99cf872b88c9a9608e896f6b319d7eb3c03b161d6df2a2b4772f674
-
SSDEEP
1536:M2LLXDhzh5tMhb0Sn2Kyy5lE55hmM6jTC9wZXWwW5zT1CDJgJ31:1nDJqwSn2KyyI5hmM6jTMsWwITYDJgJF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6444c112d8ead1762ef67a3bd5d0871d
Files
-
6444c112d8ead1762ef67a3bd5d0871d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ