Static task
static1
Behavioral task
behavioral1
Sample
6561141c81a99be0b5d94ff1eb7bc4a6e185c3e85774c1fe6a0e5aa620dea2cc.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6561141c81a99be0b5d94ff1eb7bc4a6e185c3e85774c1fe6a0e5aa620dea2cc.exe
Resource
win10v2004-20240704-en
General
-
Target
6561141c81a99be0b5d94ff1eb7bc4a6e185c3e85774c1fe6a0e5aa620dea2cc
-
Size
302KB
-
MD5
2d409e79d4d910b6f944dc2d784e5cca
-
SHA1
2ccc7cbf6f883d4e48f754d9d89b0c2c39097a40
-
SHA256
6561141c81a99be0b5d94ff1eb7bc4a6e185c3e85774c1fe6a0e5aa620dea2cc
-
SHA512
ecc62ced261aed00a1acf2ce5bf172c8b77afe1afa5f229c933bf57ab26bb4fd843131147447dee5049d84785ef43b91ee62bf0e782eefc222370cf74fb6fd3e
-
SSDEEP
6144:WCo2Ky4i1cL7GNlighD4lTjZXvEQo9dfEORRAgnIlY1:Wcsiiv8lXhuT9XvEhdfEmwlY1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6561141c81a99be0b5d94ff1eb7bc4a6e185c3e85774c1fe6a0e5aa620dea2cc
Files
-
6561141c81a99be0b5d94ff1eb7bc4a6e185c3e85774c1fe6a0e5aa620dea2cc.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajelhf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CODE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ