Static task
static1
Behavioral task
behavioral1
Sample
6ffe9772a68141931e992652f3242df9a3369d9e30cc42d7de8cdd094e9eed94.exe
Resource
win7-20231215-en
General
-
Target
6ffe9772a68141931e992652f3242df9a3369d9e30cc42d7de8cdd094e9eed94
-
Size
900KB
-
MD5
a1afe3c46541c6f8d5b0cf3f129c2b70
-
SHA1
48a0d31e241124ae90c5eb420eb84041088853a2
-
SHA256
6ffe9772a68141931e992652f3242df9a3369d9e30cc42d7de8cdd094e9eed94
-
SHA512
335d0a30f3b2be701649f5e728ebd9a4b69afb3f2a5acde52642a0d7748f4379b3aaf7d9a16d8b11f1577c90c7185282dd0bdcd658d03ff99913a90e1399feb4
-
SSDEEP
24576:azzznd/hXM7I+nrzFp6ZWU0c5uV7ItLRctRosBmpIQDjb:azzzd/W0+rKsbZ7wRaoSmxb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ffe9772a68141931e992652f3242df9a3369d9e30cc42d7de8cdd094e9eed94
Files
-
6ffe9772a68141931e992652f3242df9a3369d9e30cc42d7de8cdd094e9eed94.exe windows:6 windows x86 arch:x86
2388fee6ad8ce4f4a35dbaf64e2da01a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
EnumDisplayDevicesA
advapi32
CredEnumerateA
comctl32
PropertySheet
Sections
Size: - Virtual size: 1.3MB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE