Static task
static1
Behavioral task
behavioral1
Sample
6ea8973f9b7d914957b1f2a4b07a360c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6ea8973f9b7d914957b1f2a4b07a360c.exe
Resource
win10v2004-20231215-en
General
-
Target
6ea8973f9b7d914957b1f2a4b07a360c
-
Size
201KB
-
MD5
6ea8973f9b7d914957b1f2a4b07a360c
-
SHA1
52073d6c61611783b920b3337b8f39e14b417d5c
-
SHA256
9d8a13756443bcede5ba08c2014012cc6f3c33eff2f8a2f7470e1910c66607cc
-
SHA512
369be0d52a486b427ee360e03ad5ab5f1d82839dbd48f6b5fa44908f93df48196c77a72ab58440a512ad75d485b71e33869ec6845a51b00946c16b6e5de95f50
-
SSDEEP
3072:YXEsd7AZYa1coddOTmkua7Cy7AZYa1coddOTmkua7CQ4fi09iL48Y:+2WoddOTmPa7gWoddOTmPa7u9p8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ea8973f9b7d914957b1f2a4b07a360c
Files
-
6ea8973f9b7d914957b1f2a4b07a360c.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ