Static task
static1
Behavioral task
behavioral1
Sample
6a5b25bba2d0b01a99dc3e07e4ffc7a918e30c053dd8b8286280ca2eb30eda2c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6a5b25bba2d0b01a99dc3e07e4ffc7a918e30c053dd8b8286280ca2eb30eda2c.exe
Resource
win10v2004-20240802-en
General
-
Target
6a5b25bba2d0b01a99dc3e07e4ffc7a918e30c053dd8b8286280ca2eb30eda2c
-
Size
80KB
-
MD5
289bea773b358e7dc41cd46a98505a0b
-
SHA1
7dda7c3c47631938ea7d94375c36687d91fb2ee7
-
SHA256
6a5b25bba2d0b01a99dc3e07e4ffc7a918e30c053dd8b8286280ca2eb30eda2c
-
SHA512
4a5269862b73c2151988bc2c25aa2b2628d19598d536834c4e0aa2ab3df5dcb3801efdeea90bd33d6e8623375debde362f45d1174e784b1b9f540a7702dd8a26
-
SSDEEP
1536:uNbP2dHbQTJpzVesfMqKHNP50AED75f+04fpZfr6Xk+Ej3QSfP7hRQAfsRJJ5R2E:uNbP21klt1Pe5RED75fd4fvj6krQCDhi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a5b25bba2d0b01a99dc3e07e4ffc7a918e30c053dd8b8286280ca2eb30eda2c
Files
-
6a5b25bba2d0b01a99dc3e07e4ffc7a918e30c053dd8b8286280ca2eb30eda2c.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ