Static task
static1
Behavioral task
behavioral1
Sample
6ffc304e9c9d7408f28ba63225e9d418f0d22e6382ba2a69957a7eb997962849.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6ffc304e9c9d7408f28ba63225e9d418f0d22e6382ba2a69957a7eb997962849.exe
Resource
win10v2004-20240611-en
General
-
Target
6ffc304e9c9d7408f28ba63225e9d418f0d22e6382ba2a69957a7eb997962849
-
Size
1.4MB
-
MD5
8272c8ad1aa44a341953b97b90954ac4
-
SHA1
53efc3547276d0d844de84ec9a016dc7c28d2ca4
-
SHA256
6ffc304e9c9d7408f28ba63225e9d418f0d22e6382ba2a69957a7eb997962849
-
SHA512
61abbb33c37b0cd462524a638ee54113f91a44ab6f2cd4ecdabbd94806fd971f8b803f09f10e488ba8f62477579580d334e3aac85dea943f47f390cc52f08563
-
SSDEEP
24576:NEOxgopTbo0wcaMBFmPZpXwnAgIwv36lM46zR8FGhQ58z9X/CPb2m7V6uf2IKrEw:NEO1o0wcoPLbXokKPTWhZC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ffc304e9c9d7408f28ba63225e9d418f0d22e6382ba2a69957a7eb997962849
Files
-
6ffc304e9c9d7408f28ba63225e9d418f0d22e6382ba2a69957a7eb997962849.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ