Static task
static1
Behavioral task
behavioral1
Sample
6fd20d3fb70524d80fffd63c6a15b5e4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6fd20d3fb70524d80fffd63c6a15b5e4.exe
Resource
win10v2004-20231222-en
General
-
Target
6fd20d3fb70524d80fffd63c6a15b5e4
-
Size
186KB
-
MD5
6fd20d3fb70524d80fffd63c6a15b5e4
-
SHA1
f7cbdc130fd308c1588fd1add6697fbc7482efa3
-
SHA256
38f6dc53e3c45aac30bda5ada9ce61327e27d73e5bcc3148f3c27678522cc545
-
SHA512
7ca5c1abfe7e4239d85d8a7ed916fca507746be2714bd2cbb00570cad3ca098990d0f4cc8de9335f8d4199c88aa4df1bfd28065eef74d51af7493768f37a511e
-
SSDEEP
3072:MUDqd12NX/QCJHTYdm0VWW1BLDgqwv5TFj5YdoHNQxC0W0FnHViYHqYJGBWzcJvp:Vae/h5TYc0VV1D1A5TFMjxCEFn1zjJGt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fd20d3fb70524d80fffd63c6a15b5e4
Files
-
6fd20d3fb70524d80fffd63c6a15b5e4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 78KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 23KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE