Static task
static1
Behavioral task
behavioral1
Sample
7a6b64666c5934913b75fb3fed9e3c61.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7a6b64666c5934913b75fb3fed9e3c61.exe
Resource
win10v2004-20231215-en
General
-
Target
7a6b64666c5934913b75fb3fed9e3c61
-
Size
587KB
-
MD5
7a6b64666c5934913b75fb3fed9e3c61
-
SHA1
ebd3574c51877a78ec8a05c9ef90ecda46a08e94
-
SHA256
1e58ff0f766cdb17dbd55f7e8ab87261403ed66e9c22ab31ed9c488852568546
-
SHA512
dad28666a4530305f328cc9fcee8f9f7bf85b604669e6277c36ff1ef04a75698e957d08fe240d266050d7621493b3333faa821349400b1e19d215e975aff9aff
-
SSDEEP
12288:uIpHNK3GKsVgVWxgsmYR94+mj8OvQwQPg3CvbutLkflWv7zdcZrNU2QzI4HXB6X1:uENK3psVgVW5moTo2KBcZB0VHR6XfF4O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a6b64666c5934913b75fb3fed9e3c61
Files
-
7a6b64666c5934913b75fb3fed9e3c61.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rhkv Size: 555KB - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE