Static task
static1
Behavioral task
behavioral1
Sample
c6a193a5fd942f641d537dc5a87504f0b25960a151e8bb91161aabe8428fb191.exe
Resource
win7-20240220-en
General
-
Target
c6a193a5fd942f641d537dc5a87504f0b25960a151e8bb91161aabe8428fb191
-
Size
143KB
-
MD5
2284c40e424997afa0addce43307bdb1
-
SHA1
f65cdaf65ae742a5a34600e5720467caf7fae16c
-
SHA256
c6a193a5fd942f641d537dc5a87504f0b25960a151e8bb91161aabe8428fb191
-
SHA512
6be76918bc16b878f1fbaff171bf0477ff2f6ce188f876975ab5519b430b79037aace5615668084c7acbfb08540f90131ad67a14a896618729f924491320aec4
-
SSDEEP
3072:WjXwEWM4yT8O3FayAPNrobQwmLfZBKKxvVv9+V12W+lLxAVpbxt:WE5LyT8O3FazNr+QjrPXxvVV+GD4pbxt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource c6a193a5fd942f641d537dc5a87504f0b25960a151e8bb91161aabe8428fb191
Files
-
c6a193a5fd942f641d537dc5a87504f0b25960a151e8bb91161aabe8428fb191.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 616KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 142KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE