Static task
static1
Behavioral task
behavioral1
Sample
c6414b33c06e49eafeed920c09162b00N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c6414b33c06e49eafeed920c09162b00N.exe
Resource
win10v2004-20240802-en
General
-
Target
c6414b33c06e49eafeed920c09162b00N.exe
-
Size
47KB
-
MD5
c6414b33c06e49eafeed920c09162b00
-
SHA1
08e62eb58e555d09e250c29152c9c0799a5dee37
-
SHA256
6b7689c697c71cadf64fe5b04d5e032dbf762dac205f963d405bf65a0cf277fe
-
SHA512
d4aeb8944d45d59664f34a6362e4fea7ddbc43763c14d42de43f09696aa5953faa75045f37fc11ae723da0342ffc59d1bd078f10ae46c4d575c9af47818e5471
-
SSDEEP
768:S9eKyjAR1d/B/u8hnJHL+O519Zz51e7Nv62n3gYRNynKIFlIr+BCK7xfE9XC:S9ZH1dp/v1JHL+O5P927NeYRNgKJ+BCM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6414b33c06e49eafeed920c09162b00N.exe
Files
-
c6414b33c06e49eafeed920c09162b00N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 18KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 588B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
.rsrc/0/version.txt
-
.rsrc/1033/DIALOG/105
-
.rsrc/1033/GROUP_ICON/103
-
.rsrc/1033/ICON/1.ico
-
.rsrc/1033/ICON/2.ico
-
.rsrc/1033/ICON/3.ico
-
.rsrc/1033/ICON/4.ico
-
.rsrc/1033/ICON/5.ico
-
.rsrc/1033/ICON/6.ico
-
.rsrc/1033/ICON/7.ico
-
.rsrc/1033/ICON/8.ico
-
.rsrc/1033/ICON/9.ico
-
.rsrc/1033/MANIFEST/1.xml
-
petite
-
sample~