Static task
static1
Behavioral task
behavioral1
Sample
6ff270e82248a0377972d3df476bf013eb8dcfb6d77dc7938ca947f146bb9359.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6ff270e82248a0377972d3df476bf013eb8dcfb6d77dc7938ca947f146bb9359.exe
Resource
win10v2004-20240412-en
General
-
Target
6ff270e82248a0377972d3df476bf013eb8dcfb6d77dc7938ca947f146bb9359
-
Size
14KB
-
MD5
5fd4ee6a33d0355edc4811d343075818
-
SHA1
13f0dbb0b6118cc605d55e607d909b6715fb3cd7
-
SHA256
6ff270e82248a0377972d3df476bf013eb8dcfb6d77dc7938ca947f146bb9359
-
SHA512
9a7fa0d894a97f945ca908f660dd7bc277d485e892ce2e25619bee6ac07e188dfdaaed7045cd513cebc971eeca5dc902c8073335634da5a1c94ee25e4495a499
-
SSDEEP
384:OT3aM4umFZN0000000I9zst0DE045H/EEE:04dF75lAdEEE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ff270e82248a0377972d3df476bf013eb8dcfb6d77dc7938ca947f146bb9359
Files
-
6ff270e82248a0377972d3df476bf013eb8dcfb6d77dc7938ca947f146bb9359.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ