Static task
static1
Behavioral task
behavioral1
Sample
d6c5bb1a4b052cb2e04c070148da0f2d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d6c5bb1a4b052cb2e04c070148da0f2d.exe
Resource
win10v2004-20240226-en
General
-
Target
d6c5bb1a4b052cb2e04c070148da0f2d
-
Size
740KB
-
MD5
d6c5bb1a4b052cb2e04c070148da0f2d
-
SHA1
955db31e27a0ee19048233bb56bdce5114395ea8
-
SHA256
de9da05d912cc862f7f573f87b645bcf2cd3a0c50d62a2e50fb7eff939534098
-
SHA512
4227e1d3deabe1ddad3401683a672f106ba5d986d6169639a6ab8f32c020d9be5714cd94a2efc28460eb72427b5b7b01479698519511c3cc465fbbde5a1b3d0d
-
SSDEEP
12288:BUZMUAh8978SzJsy42Aejv3v4EUl3GwDoSomdLaKkGbRz+3:BmMUJLv3wEY3GlSZNmT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6c5bb1a4b052cb2e04c070148da0f2d
Files
-
d6c5bb1a4b052cb2e04c070148da0f2d.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 632KB - Virtual size: 632KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.petite Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE