Static task
static1
Behavioral task
behavioral1
Sample
6311c6cb765c886d3367e61244d885bb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6311c6cb765c886d3367e61244d885bb.exe
Resource
win10v2004-20231215-en
General
-
Target
6311c6cb765c886d3367e61244d885bb
-
Size
11KB
-
MD5
6311c6cb765c886d3367e61244d885bb
-
SHA1
41e5708172ac26f9e76f6bbd1cdad8dc7c59dbf5
-
SHA256
4a6a52ea89e62e748c9aa4194ff5d0bf12a793bb36cf428aa3f696f2c2c7ff26
-
SHA512
80a74a0c40119587a9c8037d972fba15c8a6c2dbf8c233a566abab429bdc958a090a2b61d950fbce79dbff379da6bc00c8f8bed81afec8d72e90365e87071d2f
-
SSDEEP
192:OrbQeVtHcZjRN23YJB1kCjBPPm0fq9sn:O/Xr+jR/BaCNPe0fos
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6311c6cb765c886d3367e61244d885bb
Files
-
6311c6cb765c886d3367e61244d885bb.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ