Static task
static1
Behavioral task
behavioral1
Sample
6db256fe0c06da29032d29d63c525ec984223415eb3e7e7ddcc85bb016dca045.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6db256fe0c06da29032d29d63c525ec984223415eb3e7e7ddcc85bb016dca045.exe
Resource
win10v2004-20240508-en
General
-
Target
6db256fe0c06da29032d29d63c525ec984223415eb3e7e7ddcc85bb016dca045
-
Size
119KB
-
MD5
0468dfe769df99cf53acf76a9070e50c
-
SHA1
e39c930e9a3a8eac36d4f3cfccc8ed382e107186
-
SHA256
6db256fe0c06da29032d29d63c525ec984223415eb3e7e7ddcc85bb016dca045
-
SHA512
ee827551b820cfbd2be5c8ea9fd3efafb697c4ced79dee63232c040df8de0277d75515a905857ef222947b5e4e93756a5a8fc46f3ccd46aec1ce2a2009510a39
-
SSDEEP
1536:zkyxzbrwkPBRUPjA+S5tnCvvhHHHH+kyxzbrwkPBRUPjA+pHwXEa61XMZCeEn7AB:ijQnCRHHHH1j3Hwo8soECAKzAde
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6db256fe0c06da29032d29d63c525ec984223415eb3e7e7ddcc85bb016dca045
Files
-
6db256fe0c06da29032d29d63c525ec984223415eb3e7e7ddcc85bb016dca045.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 63KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE