Static task
static1
Behavioral task
behavioral1
Sample
6f1f19a3890cedadf16f34952ed70a40N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6f1f19a3890cedadf16f34952ed70a40N.exe
Resource
win10v2004-20240802-en
General
-
Target
6f1f19a3890cedadf16f34952ed70a40N.exe
-
Size
323KB
-
MD5
6f1f19a3890cedadf16f34952ed70a40
-
SHA1
b41cf606cfcb1575f0a4172d14d40cbf0d09631d
-
SHA256
5fb2130b3a43b1000f32da26f547db82ddcae767c40a671b0e3ec5d6a5d61d5e
-
SHA512
fc296f8293aaf3e2cdced80e118e799744d2d05fb7d7ec30f0ca37d95fd9a0f9b1ab3119f115468851059a94e4ee5156ba22ec33c0c58f9296a41b32462bc397
-
SSDEEP
6144:dXC4vgmhbIxs3NBR8dJvOMRwBL9MkoRme8fSnAQ2jf6ZuguHZe+JOnh9WK:dXCNi9B+dJRwB50meUY30fn/HZfcnh9Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f1f19a3890cedadf16f34952ed70a40N.exe
Files
-
6f1f19a3890cedadf16f34952ed70a40N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE