Static task
static1
Behavioral task
behavioral1
Sample
6e56384a8d6a551674c87c2bf1e764ef.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
6e56384a8d6a551674c87c2bf1e764ef.exe
Resource
win10v2004-20230703-en
General
-
Target
6e56384a8d6a551674c87c2bf1e764ef.exe
-
Size
4.3MB
-
MD5
6e56384a8d6a551674c87c2bf1e764ef
-
SHA1
058d0f0a29f116658f1ebc4bd17a08c4b5c03eb0
-
SHA256
c427f44a434891971b3dfd4bf1fd85bef518c125773081bde161d06f72547521
-
SHA512
029e8f55fd52ef4b546836da84326f1263d52edd875397b491697984c099e7611e74d89d1476c9c759a0744a95c0a9abd9d4880a9b1b40224bf8408350b7def4
-
SSDEEP
98304:lAenKZbSYG/aC+Gb1F6Notrwm5W46tUo1:OWK0hX3ZFbGmF69
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e56384a8d6a551674c87c2bf1e764ef.exe
Files
-
6e56384a8d6a551674c87c2bf1e764ef.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ