Static task
static1
Behavioral task
behavioral1
Sample
6b8cb382b5966f00d75fa28f2f4c6a8f9748e7f8fb4686d11d7d17b2159b4041.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6b8cb382b5966f00d75fa28f2f4c6a8f9748e7f8fb4686d11d7d17b2159b4041.exe
Resource
win10v2004-20240426-en
General
-
Target
6b8cb382b5966f00d75fa28f2f4c6a8f9748e7f8fb4686d11d7d17b2159b4041
-
Size
14KB
-
MD5
1a15c6d7e4da36f2203086714e572603
-
SHA1
7820fb9a7f98f3a18cf63a4b2b26fc5595630deb
-
SHA256
6b8cb382b5966f00d75fa28f2f4c6a8f9748e7f8fb4686d11d7d17b2159b4041
-
SHA512
9a6047ec2c59f440068d47cfc232ff6f7532eb7a844ba6df574c180a0bf84dc512aa0a2101ec8d7bdc299d729d1b2d38abbc5ed36e86c457c90f3e28bfe86a01
-
SSDEEP
384:H3ti3FPBXZNKW/KW/KW/KW/KW/KW/KW/KW/KW/KW/KW/KW/KW/KW/KW/zJ2Ffjo1:Xti3T555555555555555z8Bjo7AK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b8cb382b5966f00d75fa28f2f4c6a8f9748e7f8fb4686d11d7d17b2159b4041
Files
-
6b8cb382b5966f00d75fa28f2f4c6a8f9748e7f8fb4686d11d7d17b2159b4041.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ