Static task
static1
Behavioral task
behavioral1
Sample
N6k8HD7.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
N6k8HD7.exe
Resource
win10v2004-20230703-en
General
-
Target
N6k8HD7.exe
-
Size
553KB
-
MD5
61c51f2d006fee89f3710be7f2547958
-
SHA1
f265ad110f44040f50e0ba561512bd9049365d6e
-
SHA256
ec868de79b6632d53b24fba0def032edd54081b95f78cb32f11b32f92a6fde7b
-
SHA512
8296dc3c28e9b0f2737ada351524bb2f1d632861709898db6f01bc17aa542596226199b0e669e57d1296a9a7600aabbd7f6d95fd401be25456004ac2422ce987
-
SSDEEP
12288:VadlVpobcP8hl98xvk9UPHEOlQzH5xqqf+xDdZiz5O5+70pKXQl2FN:VU6Qkhl98xvGUPO9f+Z6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource N6k8HD7.exe
Files
-
N6k8HD7.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 550KB - Virtual size: 550KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ