Static task
static1
Behavioral task
behavioral1
Sample
6a5ff8d244ae4a460ce972906a3fffd8.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
6a5ff8d244ae4a460ce972906a3fffd8.exe
Resource
win10v2004-20231023-en
General
-
Target
6a5ff8d244ae4a460ce972906a3fffd8.exe
-
Size
251KB
-
MD5
6a5ff8d244ae4a460ce972906a3fffd8
-
SHA1
6009dd270803e231d787e3dc1f3eb55a698f7fed
-
SHA256
d03a9517cf81eca522f483a8229379002aab4f1067ccf491f7d6cfac62e223f7
-
SHA512
b64291f3bacea9ef8657fd1e53179ca25cadc8c8b0b6774e9ca6fd4f2a83b554eaacfd4fe4bbe1c4d6c64f9302e1c7a3d684f318bc924b435ef304c543955439
-
SSDEEP
6144:lUZ7XXb7v6fsQrGsUO+ZxdQYXBmfwrhGGGGGGGGHGGGGGGGGGGGGGGGGGGGGGGGG:lyGsQX+Zxjty
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a5ff8d244ae4a460ce972906a3fffd8.exe
Files
-
6a5ff8d244ae4a460ce972906a3fffd8.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 214KB - Virtual size: 213KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ