Static task
static1
Behavioral task
behavioral1
Sample
6a8ifVD8qEneo.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
6a8ifVD8qEneo.exe
Resource
win10v2004-20230703-en
General
-
Target
6a8ifVD8qEneo.exe
-
Size
543KB
-
MD5
5c4eb96caa0fc3642fb5656644241eac
-
SHA1
a75d3ece6fa5715d5dbd876beb363279ffb3849f
-
SHA256
e7295b52154e11dd513f0000ce1cad87b2d2d5a0f674bea0b82bc6f84e1928bb
-
SHA512
3e9c7793bbc3e1b9b5b6f04d563c2b4999e70fbd92cc13743e6addf147eb5cd8312567792655f688accbc320f22adc2e1158dee047fd233d05b4bd4cc409e1ca
-
SSDEEP
12288:Lxgvai9b33bmRXP/0cMLXM53YtpTCffx2IvS1Ubd6lsaocqOdiLj:Vgvb9rb2X0c+CffhvSCbcO5JOA/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a8ifVD8qEneo.exe
Files
-
6a8ifVD8qEneo.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 540KB - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ