Static task
static1
Behavioral task
behavioral1
Sample
6a70cbcd933c1ac0fa62e79a5d6c28fb0e85e7cabed7f7d22c0613812e574e18.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6a70cbcd933c1ac0fa62e79a5d6c28fb0e85e7cabed7f7d22c0613812e574e18.exe
Resource
win10v2004-20240226-en
General
-
Target
6a70cbcd933c1ac0fa62e79a5d6c28fb0e85e7cabed7f7d22c0613812e574e18
-
Size
244KB
-
MD5
b2a4de46ca186ddfd8e25f0b6ab10174
-
SHA1
578659cce0cb33d9ac0a92fdd5e86ec9b9f0bd6b
-
SHA256
6a70cbcd933c1ac0fa62e79a5d6c28fb0e85e7cabed7f7d22c0613812e574e18
-
SHA512
62b369dafd845155e6a3227f4bad6ee6f1436ffac233d94c59fcc038f2f3b23fcbf1d842c9bafd71fe22730c11cb730b450fd6cf590bce2405429d417d61b60e
-
SSDEEP
6144:+J29QKMuYprtMsQBma/atn9pG4l+0K76zHTgb8ec1:+JzKCRMsEat9pG4l+0K7WHTd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a70cbcd933c1ac0fa62e79a5d6c28fb0e85e7cabed7f7d22c0613812e574e18
Files
-
6a70cbcd933c1ac0fa62e79a5d6c28fb0e85e7cabed7f7d22c0613812e574e18.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kofbl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ