Static task
static1
Behavioral task
behavioral1
Sample
b6957c5f70dc101d0475311e538ca67140a18a2901dcf9a69b077356c6e69453.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b6957c5f70dc101d0475311e538ca67140a18a2901dcf9a69b077356c6e69453.exe
Resource
win10v2004-20240709-en
General
-
Target
b6957c5f70dc101d0475311e538ca67140a18a2901dcf9a69b077356c6e69453
-
Size
610KB
-
MD5
7df63bfd9708b5aa24757e71eddbba39
-
SHA1
37ccbe54dc2c8b8eba284679cd8d943822091935
-
SHA256
b6957c5f70dc101d0475311e538ca67140a18a2901dcf9a69b077356c6e69453
-
SHA512
42e56cd222a975e8ce8ab614059371dececb43a0cc3dccbb42bcaf23caf59ff50fe99d6431f4a71ff80f0aa4e7077f006b806efd62a90a638c6b819a44fc933e
-
SSDEEP
12288:smqslOKhwbVAiIXSzT08FSm864r0fW8wfiJg3oXH:smIKcZIyT7SzZ+Ko
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6957c5f70dc101d0475311e538ca67140a18a2901dcf9a69b077356c6e69453
Files
-
b6957c5f70dc101d0475311e538ca67140a18a2901dcf9a69b077356c6e69453.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
yzPzORmq Size: 61KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TGOqOPny Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��{� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ap0x Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE