Static task
static1
Behavioral task
behavioral1
Sample
6d5d24710a704908c86317132c34db1184cf24f8a302478ac4b1b5260733a184.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6d5d24710a704908c86317132c34db1184cf24f8a302478ac4b1b5260733a184.exe
Resource
win10v2004-20231215-en
General
-
Target
6d5d24710a704908c86317132c34db1184cf24f8a302478ac4b1b5260733a184
-
Size
31.1MB
-
MD5
4fa3ac9a8ad6bc08fe835c9460d8fe79
-
SHA1
b9999777d009b39a9e04a075083c1cdc925da881
-
SHA256
6d5d24710a704908c86317132c34db1184cf24f8a302478ac4b1b5260733a184
-
SHA512
db2d124d5bcb6609e8946f285dd0ac7befefb6b6b238027dec3e93dccb87f646765ae12f98598510d6c1a1f2832d12e05b69d4dbf9b1be8614ee5328ccb66055
-
SSDEEP
393216:9KZs+jXvlJpEK7/v/5oDF29EkDdRua6CaHqJm1xjkw9g:iHj/lbp+29EkDd36CTmIw9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6d5d24710a704908c86317132c34db1184cf24f8a302478ac4b1b5260733a184
Files
-
6d5d24710a704908c86317132c34db1184cf24f8a302478ac4b1b5260733a184.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 31.1MB - Virtual size: 31.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ