Static task
static1
Behavioral task
behavioral1
Sample
6b546799b8e97db7d2af60c7fe881c1c8ad95f1546ae53194af236872d3f8423.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6b546799b8e97db7d2af60c7fe881c1c8ad95f1546ae53194af236872d3f8423.exe
Resource
win10v2004-20231222-en
General
-
Target
6b546799b8e97db7d2af60c7fe881c1c8ad95f1546ae53194af236872d3f8423.exe
-
Size
7.6MB
-
MD5
2a33506fc38312ecfe41004215b651ec
-
SHA1
4df7a12ef9929c8ab146bae88369b82ba0442b2e
-
SHA256
73c99583ea3aa840757bbf062ae132716d08629a8289feb79d8172d5423f42e0
-
SHA512
0ea3fa5bdd700e0f315fc88f5097b18d2b63c65fde309460aea9aa53cf55169e542543b4d17a15595a2107c5f9bd991413a400812826e0721addce9b2640f14a
-
SSDEEP
98304:9flVn93AzgmlG4sBVUkSEXHIPwsRdXNvAnJBw6dd8ktRqifttUiJ9r:9fOzgAfE3uXN0w6dd8ktRqiftt
Malware Config
Signatures
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b546799b8e97db7d2af60c7fe881c1c8ad95f1546ae53194af236872d3f8423.exe
Files
-
6b546799b8e97db7d2af60c7fe881c1c8ad95f1546ae53194af236872d3f8423.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 494KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ