Static task
static1
Behavioral task
behavioral1
Sample
6cdba588f097a3247c9a5412bdd33c9261c8e21066341eec3a8d401dfec7f37f.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6cdba588f097a3247c9a5412bdd33c9261c8e21066341eec3a8d401dfec7f37f.exe
Resource
win10v2004-20230915-en
General
-
Target
6cdba588f097a3247c9a5412bdd33c9261c8e21066341eec3a8d401dfec7f37f
-
Size
3.5MB
-
MD5
95da65693898ffb543a643291e963ce6
-
SHA1
f1e269ec82bb7db2f87ae849c0215cee98f4ecdb
-
SHA256
6cdba588f097a3247c9a5412bdd33c9261c8e21066341eec3a8d401dfec7f37f
-
SHA512
d831c3f557361a93327f6f98cac860d6299b1eaa8272eed5c3cdc814993f46b75783fb0d54bd7bf63b40db1dcbd68e66bf3c112f06bd3363a895b35a7ea0ecbb
-
SSDEEP
49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTleXNtLa3tq8mvYDfKrsQE8:Q+8X9G3vP3AMaLvgDwb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6cdba588f097a3247c9a5412bdd33c9261c8e21066341eec3a8d401dfec7f37f
Files
-
6cdba588f097a3247c9a5412bdd33c9261c8e21066341eec3a8d401dfec7f37f.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 994KB - Virtual size: 994KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ