Static task
static1
Behavioral task
behavioral1
Sample
6e456b78ccbb562d9c03339676e92961564b21aaaa1a260377fea0b8bb70df53.exe
Resource
win7-20241010-en
General
-
Target
6e456b78ccbb562d9c03339676e92961564b21aaaa1a260377fea0b8bb70df53.exe
-
Size
60KB
-
MD5
6e65c3404ec4adc3a647a208e2bb5337
-
SHA1
97ebae0bfeeb9af58e5dc5d586c9dcf3ac138f0c
-
SHA256
6e456b78ccbb562d9c03339676e92961564b21aaaa1a260377fea0b8bb70df53
-
SHA512
e796ec56ceedbf637f2cc07e5344a4ec2ab781b6f732824c6023848a27b364a96d5bd6d1fdd9dda65f5ce7e38057f0b1a5af18426abc7de316b15a1de2d11e82
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPW:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdrp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6e456b78ccbb562d9c03339676e92961564b21aaaa1a260377fea0b8bb70df53.exe
Files
-
6e456b78ccbb562d9c03339676e92961564b21aaaa1a260377fea0b8bb70df53.exe.exe windows:5 windows x86 arch:x86
b892955ae494fe908bdf52e81e1dfa4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
HSUDHUHW Size: - Virtual size: 148KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HSUDHUHW Size: 57KB - Virtual size: 60KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE