Static task
static1
Behavioral task
behavioral1
Sample
6846a4bcf9d6e196e4e786c3f38f2e65.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6846a4bcf9d6e196e4e786c3f38f2e65.exe
Resource
win10v2004-20231222-en
General
-
Target
6846a4bcf9d6e196e4e786c3f38f2e65
-
Size
391KB
-
MD5
6846a4bcf9d6e196e4e786c3f38f2e65
-
SHA1
b35bc2a8f9e21ba5736d9b19fdc9f076326d8060
-
SHA256
e023c4c21902191e5203a310178605c4b6e7fa06c74ce4b38f2ebad5e7687c34
-
SHA512
5019750322d6820a7d25fa3709b44358780fbbae0acd2008b52098df2e8e5f8c0cde9f690fac08c833ae6c928c7696d3f0d6789fc33bb92e05f9bbbd4d6f7e74
-
SSDEEP
3072:O2voeN+jaiG17Ef5KlrKnBZ59oZSmveDlcjIV8jlwI4UU+V4EFFCcll3H3rH3XDY:pQeNai17Y56rKnBfWhveajzxwIpU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6846a4bcf9d6e196e4e786c3f38f2e65
Files
-
6846a4bcf9d6e196e4e786c3f38f2e65.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 138KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE