Static task
static1
Behavioral task
behavioral1
Sample
ef6c6b475c6f971862adee07de7e81264958fb3e4c9863b38f6ab80a5a116f2e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ef6c6b475c6f971862adee07de7e81264958fb3e4c9863b38f6ab80a5a116f2e.exe
Resource
win10v2004-20240226-en
General
-
Target
ef6c6b475c6f971862adee07de7e81264958fb3e4c9863b38f6ab80a5a116f2e
-
Size
6.7MB
-
MD5
f4d09b40064ba4c35e2e93db95ee13cd
-
SHA1
9023c804ea51d389461a40fd22b4005a3b6a5561
-
SHA256
ef6c6b475c6f971862adee07de7e81264958fb3e4c9863b38f6ab80a5a116f2e
-
SHA512
235f038c9a6497142f8cd4eb605a582b361876a2b2a31119bc7f006c266f4f7d8cfc860280bef95803c2af2e353b5acac6f3d75c2d02c6dfe0ba57d3236f11ca
-
SSDEEP
98304:2va1xGFcwiOZyVo+yPCs/klq8kqXf0Fh2zgzXa9kFMd8cm5NuSZTKA0t9FFPE:42OMapPV/V8kSIh2zg+9+M+cmfbk9fc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef6c6b475c6f971862adee07de7e81264958fb3e4c9863b38f6ab80a5a116f2e
Files
-
ef6c6b475c6f971862adee07de7e81264958fb3e4c9863b38f6ab80a5a116f2e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ