Static task
static1
Behavioral task
behavioral1
Sample
6432c6b3b4380e639bd0bb2a2d1ccfbfbfa97a855eb54ab62d8931d6a893b733.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6432c6b3b4380e639bd0bb2a2d1ccfbfbfa97a855eb54ab62d8931d6a893b733.exe
Resource
win10v2004-20240412-en
General
-
Target
6432c6b3b4380e639bd0bb2a2d1ccfbfbfa97a855eb54ab62d8931d6a893b733
-
Size
3.3MB
-
MD5
d3f4da21f46ef3f9319330330c3b123a
-
SHA1
7386e083765e87bbc45c1f9529ed67ed8d580198
-
SHA256
6432c6b3b4380e639bd0bb2a2d1ccfbfbfa97a855eb54ab62d8931d6a893b733
-
SHA512
6dd5666c0e3261d959a2bc4ccc1758b1dc3314457a3797cbff54f3d49a736e8e68404bc35b2395bdeb6cc5e27c68739a7a037ca5d64c5f03719bc3d84b00d645
-
SSDEEP
24576:fGna/BolAYssrZfOvJQptB2x0TzbYH3KrtqyqT8lfVAn8Xs5dpXF+2IvzvqwAhmX:eSBoJTzbw3KrtqyqT8l/c50aSmtzCU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6432c6b3b4380e639bd0bb2a2d1ccfbfbfa97a855eb54ab62d8931d6a893b733
Files
-
6432c6b3b4380e639bd0bb2a2d1ccfbfbfa97a855eb54ab62d8931d6a893b733.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ