Static task
static1
Behavioral task
behavioral1
Sample
6720e403822fb87e8da9644b271736a2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6720e403822fb87e8da9644b271736a2.exe
Resource
win10v2004-20231215-en
General
-
Target
6720e403822fb87e8da9644b271736a2
-
Size
948KB
-
MD5
6720e403822fb87e8da9644b271736a2
-
SHA1
a42bfbd5b9a6d8a8c980853c0ef6243ae6a04b10
-
SHA256
ad2ba395a9c421d4132586083e6ce1a2239c2e07b14a548ea291b4e4ae3b7015
-
SHA512
30ac5db2b56587425ddc54cb695aa739031e5619b9254d767937a2c162f2571a7f0fdd1a3cd484a3edb4df9a256126468ebc2d81c3c6f6f2a697d33fd9ed336f
-
SSDEEP
12288:q9YoBXCUv1tCzgoKw5eVb/UCSVqm1HSIDOqc22GzNtz8UFiZGf6Jl5a63jQfNztm:qmfYSkoK0Cqwm1HSL222NC6QG63ENJA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6720e403822fb87e8da9644b271736a2
Files
-
6720e403822fb87e8da9644b271736a2.exe windows:4 windows x86 arch:x86
94c7366d739e7bf962bb011f2c5fab76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
GlobalAlloc
ExitProcess
Sections
pcs1 Size: 414KB - Virtual size: 904KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pcs2 Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pcs3 Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pcs4 Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pcs5 Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pcs6 Size: - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pcs7 Size: 527KB - Virtual size: 12.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE