Static task
static1
Behavioral task
behavioral1
Sample
06db27ad18ca1da863074456df4a347f48223ff0b6d0a335f8bc7053ec369ade.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
06db27ad18ca1da863074456df4a347f48223ff0b6d0a335f8bc7053ec369ade.exe
Resource
win10v2004-20231215-en
General
-
Target
06db27ad18ca1da863074456df4a347f48223ff0b6d0a335f8bc7053ec369ade
-
Size
1.6MB
-
MD5
40bbf8db77012f4574119141541a0491
-
SHA1
2aa62a4d62ad808b1ddd6cc23f681ea896918fef
-
SHA256
06db27ad18ca1da863074456df4a347f48223ff0b6d0a335f8bc7053ec369ade
-
SHA512
4c13a61c86b84802d95ea6fa11935ae527903672806d066dfb1ece5da91d9c0e097eb1ff7f84643ac280ac7e15af31fbb3f90ede415c8e81241b2cfe9ef69ef1
-
SSDEEP
24576:ZeDKJSNC2HKhQJnD2t1HqE+AW6rW5CL9yXQ:gDKsNC2HKhQ52vz+AWWWYkA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06db27ad18ca1da863074456df4a347f48223ff0b6d0a335f8bc7053ec369ade
Files
-
06db27ad18ca1da863074456df4a347f48223ff0b6d0a335f8bc7053ec369ade.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ