Static task
static1
Behavioral task
behavioral1
Sample
b6d1b70101acc223420e27aca2e7416b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b6d1b70101acc223420e27aca2e7416b.exe
Resource
win10v2004-20240226-en
General
-
Target
b6d1b70101acc223420e27aca2e7416b
-
Size
515KB
-
MD5
b6d1b70101acc223420e27aca2e7416b
-
SHA1
31084a3f8cb1240fd50dec4cb83e01365318e507
-
SHA256
8f6809da5489c4cfb2dfaec013a35fe99e77174b8c463ea8897238820d32de82
-
SHA512
318acf02b974be41db0d40b39684b792550c043c3636b7c36170d36add19bed0f9829be32f2a520df1a327e2f8c8dbccf81d159ab19d3d9bcbe0e6f3be37d163
-
SSDEEP
12288:dupri6XGXQyiuONEih7KLQOJtJ+/l19Xgcbtw7szO8p:du1XIV/ih7UQOc1OawAqQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6d1b70101acc223420e27aca2e7416b
Files
-
b6d1b70101acc223420e27aca2e7416b.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 510KB - Virtual size: 888KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ