Static task
static1
Behavioral task
behavioral1
Sample
6efc6a1f53fd087547c13f8f6112160a7acd2711e2cc09ca4c45d030af6bd0cb.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
6efc6a1f53fd087547c13f8f6112160a7acd2711e2cc09ca4c45d030af6bd0cb.exe
Resource
win10v2004-20240802-en
General
-
Target
6efc6a1f53fd087547c13f8f6112160a7acd2711e2cc09ca4c45d030af6bd0cb
-
Size
9.3MB
-
MD5
e6f2a40f54dbba2bada70aa15fe06637
-
SHA1
2e2a56237f453fce0a694ff9514576f16378d38b
-
SHA256
6efc6a1f53fd087547c13f8f6112160a7acd2711e2cc09ca4c45d030af6bd0cb
-
SHA512
290ab72f8e2a8e70c5296f7c8c71e37b6f8adb34ce6840b6afd9ade358d8222a23292ae06abe4ab0d2916a2af3e97ff7f70480cd4d27f9e48da0dfa8053bca64
-
SSDEEP
196608:W8d3bg0haFslY/0TD+3kb+ruXeG5kqJ+82IKpCCfk1rA1UBJ4Mi:jd3WcTy3rSInRwC8ki4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6efc6a1f53fd087547c13f8f6112160a7acd2711e2cc09ca4c45d030af6bd0cb
Files
-
6efc6a1f53fd087547c13f8f6112160a7acd2711e2cc09ca4c45d030af6bd0cb.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 545KB - Virtual size: 545KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ptrdata Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.enigma1 Size: 8.2MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE