Static task
static1
Behavioral task
behavioral1
Sample
6b9f5a4093900961bf99f9307323a395.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6b9f5a4093900961bf99f9307323a395.exe
Resource
win10v2004-20231222-en
General
-
Target
6b9f5a4093900961bf99f9307323a395
-
Size
9KB
-
MD5
6b9f5a4093900961bf99f9307323a395
-
SHA1
439fd5a3b125bc3928d853308e04886ea5b3161a
-
SHA256
b17bfa54f02e8b028005782432ce8498af8291ee30091cb643fc75fb33c70c3d
-
SHA512
02be47ef3de15517dde1710b32c87dd795258350daa504afed85b0e2c34dcb27e0ff3d0f2dc87691c34cf61579fd4d39bcccfd4ca7bcd8694642c6494d73b11c
-
SSDEEP
192:0BksuXEXVwVNteMZZ3y93VnjdwCzlB3FnmOUw:UVwrteMGFnhwCpB1n/U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b9f5a4093900961bf99f9307323a395
Files
-
6b9f5a4093900961bf99f9307323a395.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ