Static task
static1
Behavioral task
behavioral1
Sample
6fc9ab0fa81a4620bb0a0bf09296bfc9fb399dcce0d3f65d7a36664c4b732005N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6fc9ab0fa81a4620bb0a0bf09296bfc9fb399dcce0d3f65d7a36664c4b732005N.exe
Resource
win10v2004-20240802-en
General
-
Target
6fc9ab0fa81a4620bb0a0bf09296bfc9fb399dcce0d3f65d7a36664c4b732005N
-
Size
90KB
-
MD5
7646702f251f2230c2ef06e9fff5c190
-
SHA1
08e7c811e646ae7e8d1721c9bf4cf2a19aa7fe23
-
SHA256
6fc9ab0fa81a4620bb0a0bf09296bfc9fb399dcce0d3f65d7a36664c4b732005
-
SHA512
5560accbc43250857833d9f327e884c99c03e6f167d070db60391bff984f4c090beea913cb96d71385e8dbd76b8c701374fbed525533c019c0c8228d9e4a5bba
-
SSDEEP
1536:oVwC1BVu8bC2sX18u/vmNvnt1npYO/Y3MXwfOOQ/4BrGTI5Yxj:WT79OXaQqnrpYuYckU/4kT0Yxj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fc9ab0fa81a4620bb0a0bf09296bfc9fb399dcce0d3f65d7a36664c4b732005N
Files
-
6fc9ab0fa81a4620bb0a0bf09296bfc9fb399dcce0d3f65d7a36664c4b732005N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.pdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ