Static task
static1
Behavioral task
behavioral1
Sample
6422ff6985cb7d380135946d725fe121e77e9f35b5b4825f5f26534ec19daa6e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6422ff6985cb7d380135946d725fe121e77e9f35b5b4825f5f26534ec19daa6e.exe
Resource
win10v2004-20240226-en
General
-
Target
6422ff6985cb7d380135946d725fe121e77e9f35b5b4825f5f26534ec19daa6e
-
Size
2.1MB
-
MD5
08d41ccd6fc33101c23792f084b3b006
-
SHA1
5e15da6302dae8f150d728c863018f6b8abf0ef5
-
SHA256
6422ff6985cb7d380135946d725fe121e77e9f35b5b4825f5f26534ec19daa6e
-
SHA512
bd289a233f65e33f0d6ad75be9acfb7bc09ed542ec66756ee67f4403d050987f80413bb20175af8454c32acdfcd6c423b56a276bb32162a50fd4a0a0498039f5
-
SSDEEP
49152:57dKbYiBxIFdD1Hcqx4CO5xSOPj7NrtM0aSt2WzC:XKUivILZ8yOqC7Nru
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6422ff6985cb7d380135946d725fe121e77e9f35b5b4825f5f26534ec19daa6e
Files
-
6422ff6985cb7d380135946d725fe121e77e9f35b5b4825f5f26534ec19daa6e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE