Static task
static1
Behavioral task
behavioral1
Sample
6ffa2fd3b89685af520b997b5af1cb858a1bf178efb42d955bdfcc7afda6a596.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6ffa2fd3b89685af520b997b5af1cb858a1bf178efb42d955bdfcc7afda6a596.exe
Resource
win10v2004-20240802-en
General
-
Target
6ffa2fd3b89685af520b997b5af1cb858a1bf178efb42d955bdfcc7afda6a596
-
Size
72KB
-
MD5
f1beda59ddb30c726f4ee7539b88d447
-
SHA1
bc377ba1566330fda1f3eb84b1a4c821b064dadc
-
SHA256
6ffa2fd3b89685af520b997b5af1cb858a1bf178efb42d955bdfcc7afda6a596
-
SHA512
55e09cba6b58c8dcc4f73850270b25643447a9fdc00983629c6b311bff6c99a351987fb3f10694a09b2e32b892d0df2f722a8d6d264aff9d093a2cc66a51e89c
-
SSDEEP
1536:cibJb2cZq3kdUw7mSG8STRCIIzDYMmmm/tybR2E5PgUN3QivEtA:VJZ6kdUwnG8STRtIgiQE5PgU5QJA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ffa2fd3b89685af520b997b5af1cb858a1bf178efb42d955bdfcc7afda6a596
Files
-
6ffa2fd3b89685af520b997b5af1cb858a1bf178efb42d955bdfcc7afda6a596.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ