Static task
static1
Behavioral task
behavioral1
Sample
c6a30981874e6e77249a6737abb1194158562bd90d76351b859f9acaee09748b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c6a30981874e6e77249a6737abb1194158562bd90d76351b859f9acaee09748b.exe
Resource
win10v2004-20231215-en
General
-
Target
c6a30981874e6e77249a6737abb1194158562bd90d76351b859f9acaee09748b
-
Size
965KB
-
MD5
9aac686ecb2daf747300f4396a7f99f3
-
SHA1
860fd9fb7275ce15aeeac7f123cbb18e39df853c
-
SHA256
c6a30981874e6e77249a6737abb1194158562bd90d76351b859f9acaee09748b
-
SHA512
4c15943dace1c26b1177236b7fa2718e29f86753e0e6705c181796d4febc73cc2c8ea6f6b0ab92422af92ff2136d23c12db474e434226e905ef9271871a032da
-
SSDEEP
12288:J9UQyBSPmRzTFji3/fhGcmbRsd6M6s3233AH6ANAbiKOmS8v1v8aCE:3py19pi3gcmbRe6js32RiCdUaC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6a30981874e6e77249a6737abb1194158562bd90d76351b859f9acaee09748b
Files
-
c6a30981874e6e77249a6737abb1194158562bd90d76351b859f9acaee09748b.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 673KB - Virtual size: 672KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ