Static task
static1
Behavioral task
behavioral1
Sample
6a7171a330410a0f0fa5a66320c2711c21197ef5aa05a8c5d688c55d57951900.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6a7171a330410a0f0fa5a66320c2711c21197ef5aa05a8c5d688c55d57951900.exe
Resource
win10v2004-20240802-en
General
-
Target
6a7171a330410a0f0fa5a66320c2711c21197ef5aa05a8c5d688c55d57951900
-
Size
80KB
-
MD5
af3c7282f7ca110fc119ab35bf019e8a
-
SHA1
c8ab799b873b0b8dfb1fe9fa45441b6a0222a449
-
SHA256
6a7171a330410a0f0fa5a66320c2711c21197ef5aa05a8c5d688c55d57951900
-
SHA512
1b4799ae5fdf4a249cab5b5e8dc6e48c0b45744f17fa0a1c2f67fd8e2327beac01c998fffda29f62ab62914a25548b56b25d3c8207621250df8426af529e81f3
-
SSDEEP
1536:9Hsom3Av35GIZjY3TH/X2JoO3TCAmbmzobjca+FcC7G0r8YuRQAURJJ5R2xOSC44:9H63Av3gIGrXcR3T1+mzOca+WCFrae7/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a7171a330410a0f0fa5a66320c2711c21197ef5aa05a8c5d688c55d57951900
Files
-
6a7171a330410a0f0fa5a66320c2711c21197ef5aa05a8c5d688c55d57951900.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ