Static task
static1
Behavioral task
behavioral1
Sample
6686f1fbef6e98950d6b3135d882d3a6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6686f1fbef6e98950d6b3135d882d3a6.exe
Resource
win10v2004-20231222-en
General
-
Target
6686f1fbef6e98950d6b3135d882d3a6
-
Size
23KB
-
MD5
6686f1fbef6e98950d6b3135d882d3a6
-
SHA1
9a86d404d6b24802faa8be7653f330c48acf694e
-
SHA256
0565c4e275b157a9f9f68846dbc4124c457723d981b04c04fa457cff1a737ed7
-
SHA512
0a23ef874c9a13f5ce7b5c5412a16e061eda69300b9050aa4446e645b23e9b9b5171d58c93314793e3a210ef0d2a4c58061d9ed3f0af8ccd0cec4ea54f71a20c
-
SSDEEP
384:QsfegMq7FJuDzOG/4EiFgpD3bAXzz64ntWcu0/ig0wrJzAOXx3AmUa6e:ZWHsuDbrJLAXzDntxh0OJlXxwmR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6686f1fbef6e98950d6b3135d882d3a6
Files
-
6686f1fbef6e98950d6b3135d882d3a6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE