Static task
static1
Behavioral task
behavioral1
Sample
6fe6e2432dca272a384c5b224c453a23.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6fe6e2432dca272a384c5b224c453a23.exe
Resource
win10v2004-20231215-en
General
-
Target
6fe6e2432dca272a384c5b224c453a23
-
Size
115KB
-
MD5
6fe6e2432dca272a384c5b224c453a23
-
SHA1
91ba38d6110c668d0ce2a096fb8732f21e0841e0
-
SHA256
9422dc47ea10bd0949d52ba4871feed8c6b84a02c5f625d10ab2f47b3ba07e2b
-
SHA512
b8f1140bd8a60e454403141370287e7eb00167d57e489bf2a2d4e6ad0bebc90e7a78ea3fdb353330cf3d28d5d3c277f75d54fcf706fbbf5a1c7de25875855f30
-
SSDEEP
3072:0uT0yF+wKHxdqWv6zKyUOeasWA/vr/5tot2dmDSS9Q:1AyzKfZ6zpA4tB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fe6e2432dca272a384c5b224c453a23
Files
-
6fe6e2432dca272a384c5b224c453a23.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ