Static task
static1
Behavioral task
behavioral1
Sample
6ad7cbd83ccd30e81c3135779a2a58b441f6a30f5187f43e42808afad1314075.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
6ad7cbd83ccd30e81c3135779a2a58b441f6a30f5187f43e42808afad1314075.exe
Resource
win10v2004-20240426-en
General
-
Target
6ad7cbd83ccd30e81c3135779a2a58b441f6a30f5187f43e42808afad1314075
-
Size
350KB
-
MD5
9a1e9e4ecc82d30302276c6bdf4b2e72
-
SHA1
3f78857cf68de19c88f3dbfe9794a96412a2a99e
-
SHA256
6ad7cbd83ccd30e81c3135779a2a58b441f6a30f5187f43e42808afad1314075
-
SHA512
e5d58d5a2cc679e792efd6183958315d4e176e874e5be44daabe831501e3c7962a25f474de8474c58d98cdef35bee4fd39cdde4ba9ed8dc57d3aba94b363bd4f
-
SSDEEP
6144:P8gtQF3v9yLuG6kdJjKwHdr0qJ6xN4GyqX7Ma6LqwW/CbpjSCMi:P87udjdgqJG7f6Lq9abpu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ad7cbd83ccd30e81c3135779a2a58b441f6a30f5187f43e42808afad1314075
Files
-
6ad7cbd83ccd30e81c3135779a2a58b441f6a30f5187f43e42808afad1314075.exe windows:5 windows x86 arch:x86
ed264955f20d83c8f7c9958892120459
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
DefWindowProcW
advapi32
RegCloseKey
Sections
Size: - Virtual size: 164KB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE