Static task
static1
Behavioral task
behavioral1
Sample
c6ee53b392b64b5c9796c565fcbf72f0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c6ee53b392b64b5c9796c565fcbf72f0N.exe
Resource
win10v2004-20240802-en
General
-
Target
c6ee53b392b64b5c9796c565fcbf72f0N.exe
-
Size
268KB
-
MD5
c6ee53b392b64b5c9796c565fcbf72f0
-
SHA1
1ed5ccfbe4be9dd946224ec6fc92be9960443860
-
SHA256
57b8aa650054fca91eb5ac9fe3f8cb634ca8bf8e4df5a236fce1ec39fa596602
-
SHA512
976c5f0cd8d159d8db63944568a13d17862db804e50b00b55a069aea1dc05a1e13a2560fb3368f73eba30f0efd9881561e8ff80da9f072b8926769e83470edf8
-
SSDEEP
6144:kimVfvB6MDSvWcDRV2wGJclsK3CqireaFBU:kik8MDSvWqZGNYcreaFBU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6ee53b392b64b5c9796c565fcbf72f0N.exe
Files
-
c6ee53b392b64b5c9796c565fcbf72f0N.exe.exe windows:4 windows x86 arch:x86
b71d8c1931cb0a297806c1529ed52c6b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle
Sections
.text Size: 264KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 532KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ