Static task
static1
Behavioral task
behavioral1
Sample
6ff6d0e450ecd38bd82e6da4e3a6305d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6ff6d0e450ecd38bd82e6da4e3a6305d.exe
Resource
win10v2004-20231215-en
General
-
Target
6ff6d0e450ecd38bd82e6da4e3a6305d
-
Size
451KB
-
MD5
6ff6d0e450ecd38bd82e6da4e3a6305d
-
SHA1
a602002cfb55a735d832b36aa9b5082589ed5f77
-
SHA256
ee06cd80d542a3c47d88ad7100143d2d882f4eb70353f3ce619653bab8631557
-
SHA512
db3c02f40b8c1265e85230122d7783865df6bd847baab2f0b4853a19b2332117c7b67acb3dfff08433257467697113850930d2fe98614193de6137624d292b83
-
SSDEEP
6144:g7+A/EjAYBe8v5oS7H6NGHpj1XxDVDwPZA/dBNOdTbDL+XIAv8ZzJIGpFmBv8ft+:m+CEBf68j1X/kBKuOp8ZzJjFFXoLlh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ff6d0e450ecd38bd82e6da4e3a6305d
Files
-
6ff6d0e450ecd38bd82e6da4e3a6305d.exe windows:5 windows x86 arch:x86
9c836b766f01a0adb4c2aa497aa0d8e8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
CharLowerW
advapi32
RegLoadKeyA
Sections
.bss Size: - Virtual size: 288KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 708B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CRT Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE