Static task
static1
Behavioral task
behavioral1
Sample
6fe0f7676e3d5dbfaccd1508bd6e40c4.exe
Resource
win7-20231215-en
General
-
Target
6fe0f7676e3d5dbfaccd1508bd6e40c4
-
Size
3.4MB
-
MD5
6fe0f7676e3d5dbfaccd1508bd6e40c4
-
SHA1
a32e740379a09013c6619a00433232c2b9653934
-
SHA256
d16fa2c7119a3d78858bd4201797b8d7a039a06dce4e6c234faa389e5d2c8e5e
-
SHA512
2c6832fe990d2083dcdc25e7bd4ed9519367c80cd1962bd469588167d333990e95ab46b42b93bfa43921fdf9a3edd89a9ed2511b2a6eb1251ed0cb1b3f444f6b
-
SSDEEP
98304:zRS6nfSOQZOt+CW+7EELhF3gxpNOf2k2Y/WfjM+:zkj8NBFwxpNOuk2l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fe0f7676e3d5dbfaccd1508bd6e40c4
Files
-
6fe0f7676e3d5dbfaccd1508bd6e40c4.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ