Static task
static1
Behavioral task
behavioral1
Sample
6f31f28d716f4d118974c5fd130a02fb742e20f164ea12b2f1e471f58fa5b817.exe
Resource
win7-20240221-en
General
-
Target
6f31f28d716f4d118974c5fd130a02fb742e20f164ea12b2f1e471f58fa5b817.exe
-
Size
528KB
-
MD5
2562ad2e3b7633531bafa6737c6c245b
-
SHA1
ae4f5f50f98ba3aa77f891ae6a691869e51dc7e5
-
SHA256
6f31f28d716f4d118974c5fd130a02fb742e20f164ea12b2f1e471f58fa5b817
-
SHA512
6147bbf148bef4b87845cf09e7c95397ec5a13674ee4454444bdb582cc397ce58315176498f46cf6ca184d5b953fcd709b62cde8b84a0cfedc6289cdee9d7fea
-
SSDEEP
12288:bvu8+/mPTjv4dvLLy6gLPTznyl8PzBJZdR2hhTpjKsPLPPPPPPSPPP:K8++PT7EvXy6gLPfu87BGRVPLPPPPPPK
Malware Config
Signatures
-
Detects executables packed with SmartAssembly 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_SmartAssembly -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f31f28d716f4d118974c5fd130a02fb742e20f164ea12b2f1e471f58fa5b817.exe
Files
-
6f31f28d716f4d118974c5fd130a02fb742e20f164ea12b2f1e471f58fa5b817.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 520KB - Virtual size: 519KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ