Static task
static1
Behavioral task
behavioral1
Sample
6480b3f748bcb6b435f05ee9bfd9cf61.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6480b3f748bcb6b435f05ee9bfd9cf61.exe
Resource
win10v2004-20231215-en
General
-
Target
6480b3f748bcb6b435f05ee9bfd9cf61
-
Size
155KB
-
MD5
6480b3f748bcb6b435f05ee9bfd9cf61
-
SHA1
a147ead88d561404d67da82fd465ec28a52886f8
-
SHA256
fbc0ff42a65d930a046487608ccbaaea2de869b55398f65cbd8b848d469f5708
-
SHA512
eb01b0aaa0558042a5b1e1520afd30dff54a70b240d111d1d70f7effe8b1590b8e414fffaf7231bfb08d5cacdf5cc594ffb588cd3fcdbdc91c9aa6c56a1977af
-
SSDEEP
1536:ljHWUBjVLTfo9iUKFCBy2uvl/0yBtaH2ZGlLsj53Q:ljtj5TLd6mF0y/ZGql3Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6480b3f748bcb6b435f05ee9bfd9cf61
Files
-
6480b3f748bcb6b435f05ee9bfd9cf61.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 155B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ