Static task
static1
Behavioral task
behavioral1
Sample
6ff6c442c265d570f4ac800b48c25c85df51b3e2ce4d98aee9eb666894251e09.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6ff6c442c265d570f4ac800b48c25c85df51b3e2ce4d98aee9eb666894251e09.exe
Resource
win10v2004-20230915-en
General
-
Target
6ff6c442c265d570f4ac800b48c25c85df51b3e2ce4d98aee9eb666894251e09
-
Size
76KB
-
MD5
7044e350d5ce87c637beb058755884c2
-
SHA1
ac1062211fd3e2d0e0cb363e484a5ed33da88fc2
-
SHA256
6ff6c442c265d570f4ac800b48c25c85df51b3e2ce4d98aee9eb666894251e09
-
SHA512
121a297f67f9b0434b23273a8ad0d71a291a6c894c0278b8086a9be1eb82312e10e8e62bb2c41166c8ddff4001081ec77496b13c0b9acec15c5022371a55417b
-
SSDEEP
1536:FbeoslTHQkON5wtoaGC9elZlRDoqkSZZZ3YZibq:F5U0N5wtoaGCiXRDuUxbq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ff6c442c265d570f4ac800b48c25c85df51b3e2ce4d98aee9eb666894251e09
Files
-
6ff6c442c265d570f4ac800b48c25c85df51b3e2ce4d98aee9eb666894251e09.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ