Static task
static1
Behavioral task
behavioral1
Sample
6c5d27734d3ef5exeexeexeex.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
6c5d27734d3ef5exeexeexeex.exe
Resource
win10v2004-20230703-en
General
-
Target
6c5d27734d3ef5exeexeexeex.exe
-
Size
1.1MB
-
MD5
6c5d27734d3ef5923c30d25765f1198b
-
SHA1
ea0cee153094526c7b772a9f13aab1ffbf708523
-
SHA256
04e88f8d57cc0717edb85464c1098891fc409f793224c6d975af7dac16e886c5
-
SHA512
b1dc0beb2881eb256458a965010f7f6e0dbfaa65438390034dc1bd78d1df0b267cb270f6090fac37edc2a568665caaecf6d7442d03b6a3619300ca7bb794992d
-
SSDEEP
24576:QIPgLPftdNNx7cwBTS01XAAtMorIbsrg33:QUgLPzNNBcwBtXjQOi3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c5d27734d3ef5exeexeexeex.exe
Files
-
6c5d27734d3ef5exeexeexeex.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 527KB - Virtual size: 526KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 364KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ