Static task
static1
Behavioral task
behavioral1
Sample
6792fb90a47d3d0afa1f9755130d775b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6792fb90a47d3d0afa1f9755130d775b.exe
Resource
win10v2004-20231215-en
General
-
Target
6792fb90a47d3d0afa1f9755130d775b
-
Size
156KB
-
MD5
6792fb90a47d3d0afa1f9755130d775b
-
SHA1
9a38ed074a1de051e2378fb06567fde09bc51a4e
-
SHA256
368da7938495e2da431cc953ee41b6088d04e62e6825f559862f00ce574a8b88
-
SHA512
74021c034f1834ad57ae35b2fe31aff2dd8901c77f9bf8e4a5bb1327db7c160d21dfcab35e4dfb6f9a78ef09bc5638e05df329686fa3a66411e8cb0599cc4342
-
SSDEEP
3072:a2g2CbTKKb/ck3Y7SY7r29K0qofDx8a6iloy7u5yHkTzWWITUDQHsEkGt2Iem1JF:G2iJ/ckoR7r29G9a6iloy7u5yHkTzWW+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6792fb90a47d3d0afa1f9755130d775b
Files
-
6792fb90a47d3d0afa1f9755130d775b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.tls Size: 42KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rxdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE