Static task
static1
Behavioral task
behavioral1
Sample
6c9f5a083894ff057c1c7bd253f10bd9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6c9f5a083894ff057c1c7bd253f10bd9.exe
Resource
win10v2004-20231222-en
General
-
Target
6c9f5a083894ff057c1c7bd253f10bd9
-
Size
1.2MB
-
MD5
6c9f5a083894ff057c1c7bd253f10bd9
-
SHA1
fa0669069b691d874597e4756791332e9973437e
-
SHA256
a8969ee972278a3a724699180d858b9558493f050551c7d086d74c404bfa8b26
-
SHA512
35bb8dcf2e5bc4f62202890ff0620f8eb5201ea55f3f035e6dc600ff6832f765bdfcfe5e85e96ab4e971ecdeb712c643d1b366c33ee0e244c351c9e5808484a7
-
SSDEEP
24576:nDS/d3lKVksBksyy8jPWLOqIvqJUN3ObrQMd7YbrY6OimjzN6Z/jN0P:yKugvISu3OA86SnN6Z/J0P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c9f5a083894ff057c1c7bd253f10bd9
Files
-
6c9f5a083894ff057c1c7bd253f10bd9.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 183KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ