Static task
static1
Behavioral task
behavioral1
Sample
6bf500118217781b0558d52b6a4d8cdb8b6021ba570fb3ac70eed5c35cbf800b.exe
Resource
win7-20231129-en
General
-
Target
6bf500118217781b0558d52b6a4d8cdb8b6021ba570fb3ac70eed5c35cbf800b
-
Size
66KB
-
MD5
2b43eea2af70bba490f3f11bfeff382b
-
SHA1
a21d8802321521546356e6cbcba1a6df941a35c1
-
SHA256
6bf500118217781b0558d52b6a4d8cdb8b6021ba570fb3ac70eed5c35cbf800b
-
SHA512
0caa95c52a0d567c95d9ecf01016d44369958ceffa98813119a2a527b2797c33a9c51c4fb5860cebe2c43ba20019d0c31770dfe5523bc9d6f1740fc137f030b7
-
SSDEEP
1536:P7aYzMXqtGNttyUn01Q78a4RyiS4qz0XSW3iDhy3:P7aY46tGNttyJQ7KR7S4qz3DhO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6bf500118217781b0558d52b6a4d8cdb8b6021ba570fb3ac70eed5c35cbf800b
Files
-
6bf500118217781b0558d52b6a4d8cdb8b6021ba570fb3ac70eed5c35cbf800b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE