Static task
static1
Behavioral task
behavioral1
Sample
f6073ab5ac7b83de350bb6bbbb6555320754b382a9763bd49d65fe370afdc6f9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f6073ab5ac7b83de350bb6bbbb6555320754b382a9763bd49d65fe370afdc6f9.exe
Resource
win10v2004-20240226-en
General
-
Target
f6073ab5ac7b83de350bb6bbbb6555320754b382a9763bd49d65fe370afdc6f9
-
Size
1.1MB
-
MD5
0e4c5e8af74ed0436a59c2057658cea8
-
SHA1
891574540282b0a5be3c7544977529dd12ffe53d
-
SHA256
f6073ab5ac7b83de350bb6bbbb6555320754b382a9763bd49d65fe370afdc6f9
-
SHA512
bb75c8fe9ec9a9fbef263fa6456ebf1517a9b6eb51dd1a22cfa5fbca672a7f08f922d1d1994b139a8513edf031f0dece083175e136fdeb96df4ee3a5713513dd
-
SSDEEP
24576:zOBC6y90Xli7V3kPi05GMR4H1RLsTNJtvos2AO/iXWv7:EK9XIXE207
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6073ab5ac7b83de350bb6bbbb6555320754b382a9763bd49d65fe370afdc6f9
Files
-
f6073ab5ac7b83de350bb6bbbb6555320754b382a9763bd49d65fe370afdc6f9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ