Static task
static1
Behavioral task
behavioral1
Sample
6e198e3755af0e06470d17e6fdc7673c48d03390b1409734b278afd37e6e3a28.exe
Resource
win7-20240220-en
General
-
Target
6e198e3755af0e06470d17e6fdc7673c48d03390b1409734b278afd37e6e3a28
-
Size
717KB
-
MD5
845936b1ce35a6c44e943e4997caaf10
-
SHA1
ba0226f01fd028a1316ccb6e2f6c747d5b0554ec
-
SHA256
6e198e3755af0e06470d17e6fdc7673c48d03390b1409734b278afd37e6e3a28
-
SHA512
e6ef9e8e7bd00cf91da6e0fc23a1c0f1343a401dc0751d4195e3612337394f3732ecaffc94c1042e9a1f086d6dd0ae70a9cc0345a367dd218dd415f1b4a26ef4
-
SSDEEP
12288:L3NPfC6Aj+TN5uixZN+8rKhUdTC/wE1ZD0Ca5ZIXV:L3NnLOS2opPIXV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6e198e3755af0e06470d17e6fdc7673c48d03390b1409734b278afd37e6e3a28
Files
-
6e198e3755af0e06470d17e6fdc7673c48d03390b1409734b278afd37e6e3a28.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE