Static task
static1
Behavioral task
behavioral1
Sample
6af2a1b6b629dd7266c8e2e2627a64fa4bdda8ccd6ff019ad288be7c1e1ae078.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6af2a1b6b629dd7266c8e2e2627a64fa4bdda8ccd6ff019ad288be7c1e1ae078.exe
Resource
win10v2004-20240802-en
General
-
Target
6af2a1b6b629dd7266c8e2e2627a64fa4bdda8ccd6ff019ad288be7c1e1ae078
-
Size
57KB
-
MD5
e4b2b4e45c43f738e08b6eb864119a24
-
SHA1
b4ed836c7287381dc23de1da6874cdeb77dac757
-
SHA256
6af2a1b6b629dd7266c8e2e2627a64fa4bdda8ccd6ff019ad288be7c1e1ae078
-
SHA512
3f3dad493ede0cbe441d673ef3ef56fc4be21a63e5f09d9b9ba803e30e1bd6a0eb4e1af5ec242b07b7b7470480070b21564a44c5b76631f35df8bf5fa2645f1f
-
SSDEEP
768:oVP44QHyuwuXLH9ePgWjDnOKmBWogjIyQ9/SEZFGqv6okSktCD/1H5iduXdnhg:oVQ3yu1Qg4nODQoub+/3ZFGqDknCRp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6af2a1b6b629dd7266c8e2e2627a64fa4bdda8ccd6ff019ad288be7c1e1ae078
Files
-
6af2a1b6b629dd7266c8e2e2627a64fa4bdda8ccd6ff019ad288be7c1e1ae078.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ