Static task
static1
Behavioral task
behavioral1
Sample
6896156ffe9f6443b4171f417585fc20.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6896156ffe9f6443b4171f417585fc20.exe
Resource
win10v2004-20231215-en
General
-
Target
6896156ffe9f6443b4171f417585fc20
-
Size
100KB
-
MD5
6896156ffe9f6443b4171f417585fc20
-
SHA1
c044a3218dd4b4d336a6e6343f14f7a649e89a2a
-
SHA256
839dd6468ac73a738bfb18d6860eafdb4113f3854661ac3527ce485bd33abb87
-
SHA512
544fed305aae318bb86d8484c5a1a0b39fbca15109a2cc8f65fbbdd43a0f8980b7d057856c964932cd6d4d9d018f7abce4c74076311f82ed842c35e0b8de2dff
-
SSDEEP
1536:HaMuKrRSIwKiV3d0SrnBm0PAuo+QZGqrJEqA1fj5VZGHvMuczA2MN+1frqm3Yl8p:/iz0wnBmqlQHPAVXZNucM2M0rIap
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6896156ffe9f6443b4171f417585fc20
Files
-
6896156ffe9f6443b4171f417585fc20.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
c Size: - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7xfkyi94 Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rt97 Size: 734B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE