Static task
static1
Behavioral task
behavioral1
Sample
6785aca98c02691dbb3f5622e7c4e7a6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6785aca98c02691dbb3f5622e7c4e7a6.exe
Resource
win10v2004-20231215-en
General
-
Target
6785aca98c02691dbb3f5622e7c4e7a6
-
Size
2KB
-
MD5
6785aca98c02691dbb3f5622e7c4e7a6
-
SHA1
b1b8a2226f9f704f012890848f575dfbb7d765c2
-
SHA256
8f871f2cf33d52d783f79d7ad5ed28e8ee13a9ac67f8d222d44c47cabadf20a8
-
SHA512
24d842aa0c546151ffa38b973d82fcd88eb2dabf68a95508830cbed56ca690d3f49232249289ee1e60fccf6e91481b4ff684ae2c9246c721960033243b46638f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6785aca98c02691dbb3f5622e7c4e7a6
Files
-
6785aca98c02691dbb3f5622e7c4e7a6.exe windows:4 windows x86 arch:x86
7855f80896fa6ce11147235391475cba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
lstrcatA
lstrlenA
GetProcAddress
ExitProcess
Sleep
GetModuleHandleA
LoadLibraryA
VirtualProtect
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ