Static task
static1
Behavioral task
behavioral1
Sample
6992a8878d3c0664e2b1c8caf51f2682.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6992a8878d3c0664e2b1c8caf51f2682.exe
Resource
win10v2004-20231215-en
General
-
Target
6992a8878d3c0664e2b1c8caf51f2682
-
Size
2.1MB
-
MD5
6992a8878d3c0664e2b1c8caf51f2682
-
SHA1
8f25c67adf8bb5f5d78cd6dd7cc7f72d7680d316
-
SHA256
80501915b7de748011eeb3bc2b1bbb3e5862aab56b408f15f50a021416fcea43
-
SHA512
b89521796090d8e11404ec677c7a3ad5e21b3f2880731c3e81029fd247232ee541604a77f66bd02ab689449c3dad56913e2b8e75b39835cfdd9067a0ed2e0cb6
-
SSDEEP
24576:y5Gx/j5auL5Ru+RMtrNin3qQtNKPO631/Jvu7iHJUqA:TNIa3VWGkhHKqA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6992a8878d3c0664e2b1c8caf51f2682
Files
-
6992a8878d3c0664e2b1c8caf51f2682.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ