Static task
static1
Behavioral task
behavioral1
Sample
6544ad751e07b5de1f49e380cc36e147692a9efb24049876ad8186d4ca631b6aN.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
6544ad751e07b5de1f49e380cc36e147692a9efb24049876ad8186d4ca631b6aN.exe
Resource
win10v2004-20241007-en
General
-
Target
6544ad751e07b5de1f49e380cc36e147692a9efb24049876ad8186d4ca631b6aN
-
Size
86KB
-
MD5
3b7cc7db99986e01ec4a05bf13cb58e0
-
SHA1
98292f4accfb3ee2fea911454121a79a8f9b01fe
-
SHA256
6544ad751e07b5de1f49e380cc36e147692a9efb24049876ad8186d4ca631b6a
-
SHA512
c31644d5e1b30fe22a6631b684546add984a10260235e9e62d8ae176025debe44c093d7067ac655f29bc4bf4fa847695dc3e55da752570a051785fd70c759928
-
SSDEEP
1536:NB+FC9RntfWeoGiPyCHjKDjfQQQtUetDdlN5k8e8:NB+F8tfPN4yCDKDjfQQQtj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6544ad751e07b5de1f49e380cc36e147692a9efb24049876ad8186d4ca631b6aN
Files
-
6544ad751e07b5de1f49e380cc36e147692a9efb24049876ad8186d4ca631b6aN.exe windows:1 windows x86 arch:x86
17a4bd9c95f2898add97f309fc6f9bcd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
Sections
.bss Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NewSec Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE