Static task
static1
Behavioral task
behavioral1
Sample
6c3e623909400f58222811a8dceae3d596d15a75131efc9925f3e3d54582c7a7.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6c3e623909400f58222811a8dceae3d596d15a75131efc9925f3e3d54582c7a7.exe
Resource
win10v2004-20230915-en
General
-
Target
6c3e623909400f58222811a8dceae3d596d15a75131efc9925f3e3d54582c7a7
-
Size
3.9MB
-
MD5
d639dabe9a3691a0ddc72883341df97c
-
SHA1
ac70b593b3e4a111346c11a873fe953d538a4589
-
SHA256
6c3e623909400f58222811a8dceae3d596d15a75131efc9925f3e3d54582c7a7
-
SHA512
03f898d6199b764cf2ab1432c3e9696fe8105644df499b40cc7ed081aede0c6553947b73517b82762d74c02843d50297a2d90a0e3334437115b63b300e64f613
-
SSDEEP
49152:6vlanL17PmGGDFYTW6dlHQWCBFSx+2i6+AAMDPGgUhGxfmsk9T6kgTvcldlmf2On:6a9PmGe2KBFSo2tZmP9ukgYs3otdu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c3e623909400f58222811a8dceae3d596d15a75131efc9925f3e3d54582c7a7
Files
-
6c3e623909400f58222811a8dceae3d596d15a75131efc9925f3e3d54582c7a7.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE