Static task
static1
Behavioral task
behavioral1
Sample
06b4e49e2671ed84be713e5ec26618c209ac7a0861bb6b564dbe93c0312426ff.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
06b4e49e2671ed84be713e5ec26618c209ac7a0861bb6b564dbe93c0312426ff.exe
Resource
win10v2004-20240508-en
General
-
Target
06b4e49e2671ed84be713e5ec26618c209ac7a0861bb6b564dbe93c0312426ff.exe
-
Size
1.1MB
-
MD5
18aea5a553c328a5066d3b7127671110
-
SHA1
b371decf7de5b7784b1f96b3d0c29f8513b02c89
-
SHA256
06b4e49e2671ed84be713e5ec26618c209ac7a0861bb6b564dbe93c0312426ff
-
SHA512
b8f7332d10b99c28ac0beed135289a830462c85a0b462137adb50ceb42995b1bb79c56bc7ebb84304d1ab0fe738c6f9e9c8812376ec7e211ae0219aa816bedcc
-
SSDEEP
24576:2wH87t80LbWCXuq2UoidpKSgzF9buw83UgaCxAimz:hi1bfXg9KXNxS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06b4e49e2671ed84be713e5ec26618c209ac7a0861bb6b564dbe93c0312426ff.exe
Files
-
06b4e49e2671ed84be713e5ec26618c209ac7a0861bb6b564dbe93c0312426ff.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE