Static task
static1
Behavioral task
behavioral1
Sample
6dd4279a0e4b95d451f7e8805861cebf5206d0f4d0cef2e28fa3dcde0bf6cca3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6dd4279a0e4b95d451f7e8805861cebf5206d0f4d0cef2e28fa3dcde0bf6cca3.exe
Resource
win10v2004-20240226-en
General
-
Target
6dd4279a0e4b95d451f7e8805861cebf5206d0f4d0cef2e28fa3dcde0bf6cca3
-
Size
510KB
-
MD5
bad1641f803e1438c4cecf5fa61e7eab
-
SHA1
1efaa2f68dd934959b81f5224e4c44203e72a992
-
SHA256
6dd4279a0e4b95d451f7e8805861cebf5206d0f4d0cef2e28fa3dcde0bf6cca3
-
SHA512
9f83fde91dc234dfa58349e61cee1f8b968030d3ca6113c1a6de7d70dcc2f006c819105d5f921686280705271f0c36cdb007bc0f7f9b2d90e2e4eb83c483209c
-
SSDEEP
6144:tiWfKjuurv9SA5jvaqSA5dvQAumcSA5YSA5:PKNwApCAvegARA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6dd4279a0e4b95d451f7e8805861cebf5206d0f4d0cef2e28fa3dcde0bf6cca3
Files
-
6dd4279a0e4b95d451f7e8805861cebf5206d0f4d0cef2e28fa3dcde0bf6cca3.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 495KB - Virtual size: 494KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ