Static task
static1
Behavioral task
behavioral1
Sample
6733b04dc5f0d2fda412016b3b392f31.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6733b04dc5f0d2fda412016b3b392f31.exe
Resource
win10v2004-20231215-en
General
-
Target
6733b04dc5f0d2fda412016b3b392f31
-
Size
672KB
-
MD5
6733b04dc5f0d2fda412016b3b392f31
-
SHA1
7e9236db607b30489a3d1b05a6b67d35d4c70ee3
-
SHA256
50a0a96919da0405f5ee45745a7905c5bdf6170d36244a12d995b9070ed3cdb3
-
SHA512
d882ad25a87f77483625ff2b8efb7bd41afbb4c26f3f1afd9bcac8ed4bd78cd0188f0dcc8b56c6eea94c24ad5f1b48ab2bbc3c85baa6ed1bbdad401272c5a04c
-
SSDEEP
12288:OzHa7fUlSFWWafw29meSxVCOfyWbA7XzdMF3Z4mxxImGeUmEoVB:O4WWa4mD8Cgyh7XiQmXJGpmEoT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6733b04dc5f0d2fda412016b3b392f31
Files
-
6733b04dc5f0d2fda412016b3b392f31.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 356KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE