Static task
static1
Behavioral task
behavioral1
Sample
6610a1948e6e994567209770db38181b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6610a1948e6e994567209770db38181b.exe
Resource
win10v2004-20231215-en
General
-
Target
6610a1948e6e994567209770db38181b
-
Size
184KB
-
MD5
6610a1948e6e994567209770db38181b
-
SHA1
cb0643dc7983c6bbdf9092d3064bff7f98c4bdfd
-
SHA256
8e6d353716d78bf9b5e8dff285a6ef91e3cdd4cba87119b1011ccfa47dd2088b
-
SHA512
5dd5f80aa9d123313271c200772f317df86d396bd951a7961d7f676f7e435b7d82de894c7b95bd9ca3dc4410cd3484a346e506b798df9043ac7f5248bf54f90a
-
SSDEEP
3072:bAHxuCSRUF/XPRJL8E07VYiI/f0roSP4SzQw2ODCUVmLBQ8lJ3UpFqgo:yuCSRUF/fRJLonV4AQYY68lJ3UpM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6610a1948e6e994567209770db38181b
Files
-
6610a1948e6e994567209770db38181b.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vdata Size: 169KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 477B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 562B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ