Static task
static1
Behavioral task
behavioral1
Sample
6fda468e979380e9ace576d1989aee4c9dfe7ab33b748ade5f66eb3f96788649.exe
Resource
win7-20240221-en
General
-
Target
6fda468e979380e9ace576d1989aee4c9dfe7ab33b748ade5f66eb3f96788649
-
Size
5.7MB
-
MD5
b5861ef4f9218080f79ea2dae7557e6e
-
SHA1
b39a0f33b627cfe3de3948da4562641f5f8e6571
-
SHA256
6fda468e979380e9ace576d1989aee4c9dfe7ab33b748ade5f66eb3f96788649
-
SHA512
26014f76817b87a81c4664dcb39a40e7af90eccdd68216e7d5da672b8bc1c8ce5a424c80023a8107c9c0831d73b2cd309c0b9239982d2986571659554b0f3b8c
-
SSDEEP
49152:Cd+Pv94AEsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTP:CdAKUgTH2M2m9UMpu1QfLczqssnKSk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fda468e979380e9ace576d1989aee4c9dfe7ab33b748ade5f66eb3f96788649
Files
-
6fda468e979380e9ace576d1989aee4c9dfe7ab33b748ade5f66eb3f96788649.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE