Static task
static1
Behavioral task
behavioral1
Sample
6534543dbce8608c4a867fd53872f378.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6534543dbce8608c4a867fd53872f378.exe
Resource
win10v2004-20231222-en
General
-
Target
6534543dbce8608c4a867fd53872f378
-
Size
1.6MB
-
MD5
6534543dbce8608c4a867fd53872f378
-
SHA1
08fc51d4a6d70e455a6f0b02e0b98389b3d94f0b
-
SHA256
76feb278c6b0643971309c4137cc1f8f8b942d3c5ca25501f8edca028c9aaac9
-
SHA512
938968c342a16873228d25a86530d187c7f367d10b87a19b9dc8623e9021d878f2d45b26fef0626b582dfbfda101bbcf0d6e5e568ab8b0616ebc5eedaeb09efa
-
SSDEEP
49152:EIt6HrZK6ZePgZnEGy88v36JFhGxm+CM:Ft6Hr1j8CEc+b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6534543dbce8608c4a867fd53872f378
Files
-
6534543dbce8608c4a867fd53872f378.exe windows:6 windows x86 arch:x86
9ac46a598f1862d156392a2090f9a85d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStdHandle
GetProcAddress
LoadLibraryA
VirtualProtect
VirtualAlloc
VirtualFree
HeapAlloc
HeapFree
GetVersion
ExitProcess
GetLastError
GetLastError
Sections
.text Size: 1.5MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ