Static task
static1
Behavioral task
behavioral1
Sample
6aa2e20355d487340ec035c4a0542d55f4ad2e186cb4fa698ac12f3676aaaeb5.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6aa2e20355d487340ec035c4a0542d55f4ad2e186cb4fa698ac12f3676aaaeb5.exe
Resource
win10v2004-20240802-en
General
-
Target
6aa2e20355d487340ec035c4a0542d55f4ad2e186cb4fa698ac12f3676aaaeb5
-
Size
488KB
-
MD5
ba604643d5fce6f62d2d904aa79c135e
-
SHA1
0c907c8e5439f5603e453b4e1ff2bdf55f1b6d74
-
SHA256
6aa2e20355d487340ec035c4a0542d55f4ad2e186cb4fa698ac12f3676aaaeb5
-
SHA512
1af4e2d51f95e7f43111d56a5ce3fdc6f9ad0fd6d793d0274c776194f1fb481114fdebd1a244ff08de75313fa7fec5866335764e1b36c8393455cbc15c11c94d
-
SSDEEP
12288:V/M4/MP/Mx/M7/Mx/M4/MpBE/Mk/M2/M1:VbK2O2HIBEd7M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6aa2e20355d487340ec035c4a0542d55f4ad2e186cb4fa698ac12f3676aaaeb5
Files
-
6aa2e20355d487340ec035c4a0542d55f4ad2e186cb4fa698ac12f3676aaaeb5.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 52KB - Virtual size: 6.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE