Static task
static1
Behavioral task
behavioral1
Sample
6885f8b89301005b935905f06f25c573.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6885f8b89301005b935905f06f25c573.exe
Resource
win10v2004-20231222-en
General
-
Target
6885f8b89301005b935905f06f25c573
-
Size
1.2MB
-
MD5
6885f8b89301005b935905f06f25c573
-
SHA1
93d40dfac000698ba546ff2e235a5510cff721bd
-
SHA256
a8169485e85db41c94a9b26f4fb77c84bddeb351425b8184224cdf10bd4a55ec
-
SHA512
4399fd384d1f3aa5934c392203cdf05b4d0d9133f39cc07aba5f217470d49e4100eaa183ced1f4dbcb2ebc7d4ac9501eb519293e48ad938da75a44876b78dca3
-
SSDEEP
12288:1mXkXnQNCeCuT83g40PQInlDddCDfVXskY3Qb+agdmgstkxaJfEW61G:8xN5CE8wV15SfVXX+agdmzegJfEW61G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6885f8b89301005b935905f06f25c573
Files
-
6885f8b89301005b935905f06f25c573.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 704KB - Virtual size: 704KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 464KB - Virtual size: 464KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE