Static task
static1
Behavioral task
behavioral1
Sample
c6faad67d82e662659b4775331c1f12e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c6faad67d82e662659b4775331c1f12e.exe
Resource
win10v2004-20240226-en
General
-
Target
c6faad67d82e662659b4775331c1f12e
-
Size
89KB
-
MD5
c6faad67d82e662659b4775331c1f12e
-
SHA1
a4c05c85b32c5795b49a4268ad3920d30855cb26
-
SHA256
bf3912d8201db4ee2e01ee537ba8a0c46b3921b0a4a10fee7414b681a8831aa6
-
SHA512
f964d8025c102f651043e59ff309e21438d16f1f47e65c3bcab88e8ad4eb1f89d3a56e9e247d09259c5e625e79dfef0b9eb8955e8a6bc55cb5eee5499369fa4a
-
SSDEEP
1536:KMCPhjiwVuURAf3Zfi72DYG7Hu9ROLD30MsmaiXv4LII36MXx+k1jHgrbYW0mJE:8P8Yi9pO9ROLDNsm9XGIIKaTgrkW07
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6faad67d82e662659b4775331c1f12e
Files
-
c6faad67d82e662659b4775331c1f12e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
��1�(�<7 Size: 79KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
� r��(� Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ