Static task
static1
Behavioral task
behavioral1
Sample
6c8af0fbafdbfd92df073c0df1be2d56.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
6c8af0fbafdbfd92df073c0df1be2d56.exe
Resource
win10v2004-20230220-en
General
-
Target
6c8af0fbafdbfd92df073c0df1be2d56.exe
-
Size
607KB
-
MD5
6c8af0fbafdbfd92df073c0df1be2d56
-
SHA1
1c40a46e17f4b7c55378a44d80317046aa707c70
-
SHA256
68fb165f63819908a0bcfb81a4b370d0df062374b1d92b89532be48a92eec06c
-
SHA512
59eb94e5f8b6dd802b3fa12b2650c7ba2819c7523e2ec9d66fa88384c37d6ffc26c5029264b2308fa48086a321b9a0f6acbe113293832de871726813eed5f76d
-
SSDEEP
12288:U7z5GoJiGaq5au6oGPKajT+FkZG4kpuFiVvOzUFNWcd:C5GoR5adjT+KI4CuFiVGgFNWc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c8af0fbafdbfd92df073c0df1be2d56.exe
Files
-
6c8af0fbafdbfd92df073c0df1be2d56.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 598KB - Virtual size: 597KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ