Static task
static1
Behavioral task
behavioral1
Sample
6600b34a942676ff4ff62d0170446bda1798c2a21847afc3fc6d2e77efad9814.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6600b34a942676ff4ff62d0170446bda1798c2a21847afc3fc6d2e77efad9814.exe
Resource
win10v2004-20240508-en
General
-
Target
6600b34a942676ff4ff62d0170446bda1798c2a21847afc3fc6d2e77efad9814
-
Size
7KB
-
MD5
da548566c1781c035f8fcd8db5b8d875
-
SHA1
1adfd63f3f71566ceca0c384a91843d561de64e6
-
SHA256
6600b34a942676ff4ff62d0170446bda1798c2a21847afc3fc6d2e77efad9814
-
SHA512
9634cc6efd9dbc6936d99054086d88b0892753572c91f034f217a4f02e0dbbbb6224ea1c9312e76dbd630a770aec08fd20e2101b46d4a13bdfb1f5eda0066d2c
-
SSDEEP
96:W862U92h+H2h+nnTzqLzqFZW+M+C+M+U87rY4WsOsjM/MQyaQao50plFIKflFIKL:W86z92h+H2h+nTuLu4nsOsalpkKfkKpl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6600b34a942676ff4ff62d0170446bda1798c2a21847afc3fc6d2e77efad9814
Files
-
6600b34a942676ff4ff62d0170446bda1798c2a21847afc3fc6d2e77efad9814.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
Sections
.text Size: 311KB - Virtual size: 310KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wixburn Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ