Static task
static1
Behavioral task
behavioral1
Sample
6c81bdf1fdd5cfa0877fc564319dd4b7a2a9ea0fd2ec0c873633a85b4592e134.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
6c81bdf1fdd5cfa0877fc564319dd4b7a2a9ea0fd2ec0c873633a85b4592e134.exe
Resource
win10v2004-20230220-en
General
-
Target
6c81bdf1fdd5cfa0877fc564319dd4b7a2a9ea0fd2ec0c873633a85b4592e134
-
Size
422KB
-
MD5
1915264ab593e0fb2bc7393d90aaeeb6
-
SHA1
07893ca493d5ca161d30986fa24c44e3f30e9166
-
SHA256
6c81bdf1fdd5cfa0877fc564319dd4b7a2a9ea0fd2ec0c873633a85b4592e134
-
SHA512
36d3ff6bc9f2c3e3f80fc076bd8977da92ca5ce77042acb971091cf98e79594e29a03655eb11b1ebaccb2ce1955c63de2622e683f2f87e573f95c6b2f89c4e89
-
SSDEEP
6144:iDoc5GxsHk5ICguDftGL1V+I+x7tBbb0RN0qvzBId2uRIbM:i0c5ShUwI47b0N6tIbM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c81bdf1fdd5cfa0877fc564319dd4b7a2a9ea0fd2ec0c873633a85b4592e134
Files
-
6c81bdf1fdd5cfa0877fc564319dd4b7a2a9ea0fd2ec0c873633a85b4592e134.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 247KB - Virtual size: 247KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 174KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ