Static task
static1
Behavioral task
behavioral1
Sample
6f5b45e959750b342eeaf098943606bc6b206945ba899170867e71b1799dbbd1.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6f5b45e959750b342eeaf098943606bc6b206945ba899170867e71b1799dbbd1.exe
Resource
win10v2004-20230915-en
General
-
Target
6f5b45e959750b342eeaf098943606bc6b206945ba899170867e71b1799dbbd1
-
Size
3.6MB
-
MD5
685e2e976a885253fc93578fae213377
-
SHA1
47b6ac32d5042ea362c6ab6430f4932ea949c263
-
SHA256
6f5b45e959750b342eeaf098943606bc6b206945ba899170867e71b1799dbbd1
-
SHA512
dcb2d87888802a80e9f333fefbe33f3846472de110fd6cd6438561318bbda1b4d9f175865884adf9e9c5446710895300aa412380427a375f68349b4aac6e1e28
-
SSDEEP
49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTld4SGlbYLse8I+VoAA31Nn:c+8X9G3vP3AMWEseP+oD3Xn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f5b45e959750b342eeaf098943606bc6b206945ba899170867e71b1799dbbd1
Files
-
6f5b45e959750b342eeaf098943606bc6b206945ba899170867e71b1799dbbd1.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 994KB - Virtual size: 994KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ