Static task
static1
Behavioral task
behavioral1
Sample
6867c92a66118e4586d2e091b0d801bc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6867c92a66118e4586d2e091b0d801bc.exe
Resource
win10v2004-20231222-en
General
-
Target
6867c92a66118e4586d2e091b0d801bc
-
Size
143KB
-
MD5
6867c92a66118e4586d2e091b0d801bc
-
SHA1
8c0d17594bc35a170b498568f2b6d08ad7a25969
-
SHA256
adfa7a0263d9ab738a9ca086906ef9886d0d6dbe4682003d8575696b10cdcdc3
-
SHA512
848c90c17286fda88559aa88351cb8e2036368816dd6514c0b7cda4d443a70302dfaeae73c72647e2b8ba985ce6cadf2ab54e73dbc5b08e9a5af33bf223df21b
-
SSDEEP
1536:qZ+0szHQv8kkLD3XsuEp4uoYRwr30Fpb+4D5K3TPVXOLFU+c9So+YAP5WGuG43CS:qmjQvAAuEBZCcpS4gL+GD+A9tWXtT5hA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6867c92a66118e4586d2e091b0d801bc
Files
-
6867c92a66118e4586d2e091b0d801bc.exe windows:4 windows x86 arch:x86
aa1ca832e28e2c6a63685365c58b52b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadModule
user32
MessageBoxA
Sections
.text Size: - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ