Static task
static1
Behavioral task
behavioral1
Sample
6accdfb7750b5eae978470aad844441ab0b96f9e5252ce92690d41b5fac0177a.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
6accdfb7750b5eae978470aad844441ab0b96f9e5252ce92690d41b5fac0177a.exe
Resource
win10v2004-20240426-en
General
-
Target
6accdfb7750b5eae978470aad844441ab0b96f9e5252ce92690d41b5fac0177a
-
Size
14KB
-
MD5
98b44315e6ebe7382b218a4b80203974
-
SHA1
811fd4d15e16e42be83f54438ca3d07fcd80e81a
-
SHA256
6accdfb7750b5eae978470aad844441ab0b96f9e5252ce92690d41b5fac0177a
-
SHA512
f94832cb3cb36b8828ceba8455616e6613350be808b68d677f9c01dbc4d5f197095ad8fd764414486b046a0627fb5637b00028f2439117f9817e5e59ad04516d
-
SSDEEP
192:S3TEuXcOAq+aGoUQUQDmVWmBsYSOcok+9zxgJ1Z2UwhQMzMIbztAe+gYJg:vycNpaGSUQDSp5SOcXWgmDVAI+EYJ
Malware Config
Signatures
-
Detects executables packed with SmartAssembly 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_SmartAssembly -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6accdfb7750b5eae978470aad844441ab0b96f9e5252ce92690d41b5fac0177a
Files
-
6accdfb7750b5eae978470aad844441ab0b96f9e5252ce92690d41b5fac0177a.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ