Static task
static1
Behavioral task
behavioral1
Sample
6548907.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
6548907.exe
Resource
win10v2004-20230220-en
General
-
Target
4C28DCB7CBA7C13D0692B98FB620A04EEDB639535D10BA3D2315F2CF00201CD1
-
Size
692KB
-
MD5
6d7a4090737585a76a3e4d9adf0c1777
-
SHA1
575fee78b66a49f9503566dfeb7ff6b2a24d034e
-
SHA256
4c28dcb7cba7c13d0692b98fb620a04eedb639535d10ba3d2315f2cf00201cd1
-
SHA512
100346a84bde622585a8290fb0d1b44556718bb42bb42dd5e9192a31970ad24bf40dc97726ade7e07a3a6f50072acc7d90cd70e076bf037c0899b95c28254014
-
SSDEEP
12288:L5ek11627caXxeO3DdnqrEEyVatQ188+FcuUKHoJiV2OkKw3JE2HU10rWHgE1iX:vPXxemDdnUyVB1IFiKHoJiVfkjZdDVZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/6548907.exe
Files
-
4C28DCB7CBA7C13D0692B98FB620A04EEDB639535D10BA3D2315F2CF00201CD1.7z
-
6548907.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 802KB - Virtual size: 802KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ