Static task
static1
Behavioral task
behavioral1
Sample
6e7e082560fc99aa222c6c08b87d419b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6e7e082560fc99aa222c6c08b87d419b.exe
Resource
win10v2004-20240226-en
General
-
Target
6e7e082560fc99aa222c6c08b87d419b
-
Size
379KB
-
MD5
6e7e082560fc99aa222c6c08b87d419b
-
SHA1
114764c436b57379a80b3877fecf36298d57b250
-
SHA256
d0cfbf888885f694aa9aa632b7a8a3c40cc2ab4496e2b0cb4d919c39ab5508d3
-
SHA512
d55c5504f5702132776f1484530307a28726fc88c16d5e316e0f2986fd48ad63a9cea37ff7832440c5af61d901fa9f13148d7b6ecb23b2f6e48134a1634fb62b
-
SSDEEP
6144:it03a62hzpSNxV2qcJVLNyTiY6wDyIJ2r/bDb:Os52hzpHq8eTi30yIQrDDb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e7e082560fc99aa222c6c08b87d419b
Files
-
6e7e082560fc99aa222c6c08b87d419b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
packerBY Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE