Static task
static1
Behavioral task
behavioral1
Sample
6de6df810f6475ecf826f1ed73683a882ac19a0f38202f280bbfb0e8171cb00c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6de6df810f6475ecf826f1ed73683a882ac19a0f38202f280bbfb0e8171cb00c.exe
Resource
win10v2004-20240226-en
General
-
Target
6de6df810f6475ecf826f1ed73683a882ac19a0f38202f280bbfb0e8171cb00c
-
Size
1.7MB
-
MD5
530cbb598e94a73f3b98c8b305d382ea
-
SHA1
4c7b8c7a4708623e1d2ff923b856f662ad0e43be
-
SHA256
6de6df810f6475ecf826f1ed73683a882ac19a0f38202f280bbfb0e8171cb00c
-
SHA512
fd1451e243a508f45e01f0d4e7a62b828272c355bcb72f199c8296ec4f3d91644efa04be914004786c2cb1b4570a5dcf151fb2e63f748f9566882057250996f6
-
SSDEEP
24576:P4+SasAm22U5U+btIIG57Sr0nG6Z80pXFX2IvL2IvLvqwAPopUOLpXF:PfSWIIGbaw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6de6df810f6475ecf826f1ed73683a882ac19a0f38202f280bbfb0e8171cb00c
Files
-
6de6df810f6475ecf826f1ed73683a882ac19a0f38202f280bbfb0e8171cb00c.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ