Static task
static1
Behavioral task
behavioral1
Sample
6b70e9be1c3c1d2a2941e6d8850adbaeea8fe69622a62f8084737335bd90a29d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6b70e9be1c3c1d2a2941e6d8850adbaeea8fe69622a62f8084737335bd90a29d.exe
Resource
win10v2004-20230915-en
General
-
Target
6b70e9be1c3c1d2a2941e6d8850adbaeea8fe69622a62f8084737335bd90a29d.exe
-
Size
1.0MB
-
MD5
b7e2faee1a43306c9823751208e296da
-
SHA1
2aab8efc9d030794e85dd3bc88a37f40ff59418f
-
SHA256
6b70e9be1c3c1d2a2941e6d8850adbaeea8fe69622a62f8084737335bd90a29d
-
SHA512
18267295e97549fc251b91d840f9e19da08da668b11db69f3443bc2dfe4525d587e42ca4943d389b5eaf7ee0c8c61025f6bba20c645c6cf1ce36909b6bb3fa5b
-
SSDEEP
24576:1mEp+bl2LZ894kTja81N5Fjk4LfmVr2b2DamK0lF4:1jMbIZ894kBk0eG2+mK/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b70e9be1c3c1d2a2941e6d8850adbaeea8fe69622a62f8084737335bd90a29d.exe
Files
-
6b70e9be1c3c1d2a2941e6d8850adbaeea8fe69622a62f8084737335bd90a29d.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
JbksF+Z Size: 941KB - Virtual size: 941KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ