Static task
static1
Behavioral task
behavioral1
Sample
646d556988878603555409469310806e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
646d556988878603555409469310806e.exe
Resource
win10v2004-20231215-en
General
-
Target
646d556988878603555409469310806e
-
Size
1.6MB
-
MD5
646d556988878603555409469310806e
-
SHA1
ba865503052d9a49976a1025af6522c3b9649dec
-
SHA256
8965e2a408ad4ef4ac6e6a9ff5b459f89fe8cf5b21a56c17524ac4b798247947
-
SHA512
7b9000446ccd6b5328dfcebcb63747a37b3b7be142e7e8e9c182404b82794aa95d05ebe793dc1b3853ab58e2ff07ee1afb31e3a06fe392601d2d316add28692d
-
SSDEEP
49152:1Oc1zpBe9344wFk0mQnMpEdnwuxtRow26tMc:DVQ934/y/QnRFtRV2O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 646d556988878603555409469310806e
Files
-
646d556988878603555409469310806e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 1.4MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 214KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ