Static task
static1
Behavioral task
behavioral1
Sample
b6b60792712597201d082ff62c694812.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b6b60792712597201d082ff62c694812.exe
Resource
win10v2004-20240226-en
General
-
Target
b6b60792712597201d082ff62c694812
-
Size
512KB
-
MD5
b6b60792712597201d082ff62c694812
-
SHA1
cca95bd9d9fcbf0b003bd700003b3f4269a77468
-
SHA256
28437fc3d3a0150f8cbbc1207d1d9a7a50ab62e19b7042cb8acbea0dcf735ce7
-
SHA512
9146f5cc7ad2433c0a0d083952451d2a08fbbedfb529c3d0244f48fe2a0cdac09f73705bb321bad679a2dbc21d6c27201f80d527eed1f11413ab7ff7c9581d14
-
SSDEEP
12288:HOH3+eNZ8NbflbKFUEJd0I4aOyiVSXx3madrUQNXQFvXMBk1:sBf89TuxiQ1dv0D1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6b60792712597201d082ff62c694812
Files
-
b6b60792712597201d082ff62c694812.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 801KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 258B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE