Static task
static1
Behavioral task
behavioral1
Sample
d6baa4e269046437823ac612f1027dff.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d6baa4e269046437823ac612f1027dff.exe
Resource
win10v2004-20240226-en
General
-
Target
d6baa4e269046437823ac612f1027dff
-
Size
35KB
-
MD5
d6baa4e269046437823ac612f1027dff
-
SHA1
ab3707a43e7a2e273650e368ed47f50cb3967355
-
SHA256
358b2d81b00fb302b4228d543526672287ee671549a189c9288cc1f9366c689e
-
SHA512
bcf1722991a47e36aebf20edf3db20825a390244acaef6dc8d141e475852b8da0d330895a4b3831019410196e2c33e5183310691046e165e6b7ddbdd19c9fec9
-
SSDEEP
768:k2e36mYvbuBBjpV4ZaZr6plv8y+U+J5DvyCYCKtqQWOUk5r:k266b4B/4jlOByCDKhl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6baa4e269046437823ac612f1027dff
Files
-
d6baa4e269046437823ac612f1027dff.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
08.04.09 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE