Static task
static1
Behavioral task
behavioral1
Sample
6b138bd532e2a9014066d9860e10b45aa70148433a41d966f6bc60a50a20619d.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6b138bd532e2a9014066d9860e10b45aa70148433a41d966f6bc60a50a20619d.exe
Resource
win10v2004-20240508-en
General
-
Target
6b138bd532e2a9014066d9860e10b45aa70148433a41d966f6bc60a50a20619d
-
Size
4.0MB
-
MD5
b8147c6cd2958629bc9ee6387298bfb3
-
SHA1
2ca6d4d1c94f388d2433982c7a33688858293a66
-
SHA256
6b138bd532e2a9014066d9860e10b45aa70148433a41d966f6bc60a50a20619d
-
SHA512
bf750b390539617d3b95fab7b93e4c4bb0fe1dbe3b2e27f27674f4a38e6804084b3b7c55ff4051eccc4e1581d847f74bf9bc09e7d9cf05ee3f575b9fff1b0d12
-
SSDEEP
98304:w6Gn9646r6HaSHFaZRBEYyqmS2DiHPKQgmZ0V:CaSHFaZRBEYyqmS2DiHPKQg/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b138bd532e2a9014066d9860e10b45aa70148433a41d966f6bc60a50a20619d
Files
-
6b138bd532e2a9014066d9860e10b45aa70148433a41d966f6bc60a50a20619d.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jfbbql Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ