Static task
static1
Behavioral task
behavioral1
Sample
c6acc7650860b7ef6ab1846b390daa1d05df2900808c2afd9a1863cf9a66b3ee.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c6acc7650860b7ef6ab1846b390daa1d05df2900808c2afd9a1863cf9a66b3ee.exe
Resource
win10v2004-20240221-en
General
-
Target
c6acc7650860b7ef6ab1846b390daa1d05df2900808c2afd9a1863cf9a66b3ee
-
Size
1.3MB
-
MD5
5652585322ca746ebaea778aae689a1c
-
SHA1
d457dd2837925ee02f22b628c4e69f67b34e8410
-
SHA256
c6acc7650860b7ef6ab1846b390daa1d05df2900808c2afd9a1863cf9a66b3ee
-
SHA512
3194c334463accce5906b3f86cb5119523defe07a028a60717a4763d442352c38193dcc7e7d990c4c16ff45740692d7eb7f3e9b5f2a860a2b671a7366634d78d
-
SSDEEP
24576:iDtLLLL7jMITMvRFhRRbNWoCfkYSEH3OqtwIuXKkqjVnlqud+/2P+ApFDGLLLLhj:ixLLLL7jMITYbNbNWo4kSH3OqtwIjkqU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6acc7650860b7ef6ab1846b390daa1d05df2900808c2afd9a1863cf9a66b3ee
Files
-
c6acc7650860b7ef6ab1846b390daa1d05df2900808c2afd9a1863cf9a66b3ee.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ