Static task
static1
Behavioral task
behavioral1
Sample
d6f0cca3fb2055b08e8f2cd6443e4bf8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d6f0cca3fb2055b08e8f2cd6443e4bf8.exe
Resource
win10v2004-20240226-en
General
-
Target
d6f0cca3fb2055b08e8f2cd6443e4bf8
-
Size
304KB
-
MD5
d6f0cca3fb2055b08e8f2cd6443e4bf8
-
SHA1
df55b54e4eef7f811a51efd6057f751112cd53a2
-
SHA256
d103079a7f1302483e539dd1d37ed14edab8dac8b86b57bf96b0df0102d7e160
-
SHA512
6359f79f49080c718a6e1dd9c3a932f000101871bc5d8bf21e12f1d1a25d90dea2c4cea2cf868e1e8a523f905da8b39d74610ffd0893ac2a1e49c71103362080
-
SSDEEP
6144:doAi1mFiMmHEhdnij52pWBCbhYBl7X3BmOTaV1mjm:FICiMmHEhdnk2pWB2aD7XRLeia
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6f0cca3fb2055b08e8f2cd6443e4bf8
Files
-
d6f0cca3fb2055b08e8f2cd6443e4bf8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.code Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 298KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 496KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ