Static task
static1
Behavioral task
behavioral1
Sample
c6f3ec863e66db7157b6370d48f7edbb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c6f3ec863e66db7157b6370d48f7edbb.exe
Resource
win10v2004-20240226-en
General
-
Target
c6f3ec863e66db7157b6370d48f7edbb
-
Size
199KB
-
MD5
c6f3ec863e66db7157b6370d48f7edbb
-
SHA1
0798dba862b820394b9cd754d3beadadc0c07f75
-
SHA256
6b8b21c8cc8d613bb4942069f70264f45f58d991ad7c4709ff1ac230469f78a3
-
SHA512
0433a26eb704c1a296a75e3216a222700fdff78e6f9ee9fd6fa5cb3f857c24ef4eab8ef32839c686cf94fe3203cdd52070ac581c60b22c6a525c1a80c10fa7f2
-
SSDEEP
3072:HYx4erN92H13yCg0IFbPFYPQYIaYl1QyOaS2Im9ix1LcMbN8xXYCLDkEzlrnjQAd:HYX+bZIFbPylIaYHl/wfTIXNZrt2/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6f3ec863e66db7157b6370d48f7edbb
Files
-
c6f3ec863e66db7157b6370d48f7edbb.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 197KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ