Static task
static1
Behavioral task
behavioral1
Sample
6532f297ce181be5522d0d5cf95e93cb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6532f297ce181be5522d0d5cf95e93cb.exe
Resource
win10v2004-20231215-en
General
-
Target
6532f297ce181be5522d0d5cf95e93cb
-
Size
114KB
-
MD5
6532f297ce181be5522d0d5cf95e93cb
-
SHA1
3e8f3785d888e29e49a77486fe84631144fb5d86
-
SHA256
434c8f8ca42361c1d70e00a7b5967406263ab310d85728f2a779a3b1c175833b
-
SHA512
9d60c1307e0c9326a9a73d76db64a9149cc5b8fa24043f5a3909a6cc52f4299178bebaddcd69a8a34d481a1221eb4f8efe26da5e172dc9dd75c63277401cc550
-
SSDEEP
3072:bSTNTPjlzcY3jW1377WARHnBoPkKfMT335Ttx5:UNTPjBR3S377WARHBUArx5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6532f297ce181be5522d0d5cf95e93cb
Files
-
6532f297ce181be5522d0d5cf95e93cb.exe windows:4 windows x86 arch:x86
2b7b680691508b0dc854de2c25b3f390
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__set_app_type
_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit
kernel32
GetModuleHandleA
SetProcessAffinityMask
GetProcAddress
FileTimeToSystemTime
FindNextFileA
CallNamedPipeA
GetPrivateProfileSectionA
OpenSemaphoreA
GetStartupInfoA
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ