Static task
static1
Behavioral task
behavioral1
Sample
6fc1e9e7942ba69aa7d4e252919a108e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6fc1e9e7942ba69aa7d4e252919a108e.exe
Resource
win10v2004-20231215-en
General
-
Target
6fc1e9e7942ba69aa7d4e252919a108e
-
Size
143KB
-
MD5
6fc1e9e7942ba69aa7d4e252919a108e
-
SHA1
48e3941bdeff80273e474a2a6f0d033d73b4adf5
-
SHA256
f000dde6db5d6188ba422b51c7908c9fc5fdad74cb1f3a6a24d75711e04595ae
-
SHA512
1657b72176fda4ffd3dc62cdcf25bd3727a00b48b79863c4707404be94c53678acadee854db73a3ff0ada1bb083234b2c8ff980703a075884d450982976d1905
-
SSDEEP
3072:eBhx25y6j+oPB4wDYwNqGYdiDQLSLXFgJJHynbaQLLLLLLLL7:6f25DB4RGNw4FgJJo+E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fc1e9e7942ba69aa7d4e252919a108e
Files
-
6fc1e9e7942ba69aa7d4e252919a108e.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 131KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE