Static task
static1
Behavioral task
behavioral1
Sample
6cf3525b3054f1ca89073305b57c61419c8e80d4455c02835c28a6a3135e4f49.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6cf3525b3054f1ca89073305b57c61419c8e80d4455c02835c28a6a3135e4f49.exe
Resource
win10v2004-20240419-en
General
-
Target
6cf3525b3054f1ca89073305b57c61419c8e80d4455c02835c28a6a3135e4f49
-
Size
14KB
-
MD5
834b2f0c4cbbf292587c973f93cb3ffc
-
SHA1
2703b9eea56477cf56f62f0fbcf1e98543b45610
-
SHA256
6cf3525b3054f1ca89073305b57c61419c8e80d4455c02835c28a6a3135e4f49
-
SHA512
ee52a2a81b2ee41016af570c06ce73bcadeb4a023cfa9474a00089ee889c11d3117c69f483539330389b99e7d542a628c1d4c5557c1249b3c8bf575ccc766186
-
SSDEEP
384:YcmnhQtOM+Ppppppppppblons2NzDE045H:Y1M+/eBNvA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6cf3525b3054f1ca89073305b57c61419c8e80d4455c02835c28a6a3135e4f49
Files
-
6cf3525b3054f1ca89073305b57c61419c8e80d4455c02835c28a6a3135e4f49.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ