Static task
static1
Behavioral task
behavioral1
Sample
c6713bcefcc79991e3d132eced7780b71ff5c230bfe7e53867586fe660b40b83.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c6713bcefcc79991e3d132eced7780b71ff5c230bfe7e53867586fe660b40b83.exe
Resource
win10v2004-20240419-en
General
-
Target
c6713bcefcc79991e3d132eced7780b71ff5c230bfe7e53867586fe660b40b83
-
Size
170KB
-
MD5
3d0ba89b760e2ce5127f6279260087f7
-
SHA1
8a4da2edf39f0d3ee628f017bac0154879961bba
-
SHA256
c6713bcefcc79991e3d132eced7780b71ff5c230bfe7e53867586fe660b40b83
-
SHA512
0257559cef0d91fb851833992a283b0438ad69d0b009473b6e73305db6d4a984a908dd056b745dab9ff1f64a43fc47770ae638ececfa222d6c7f69c15b5bcee9
-
SSDEEP
1536:zVMo0eqRGTLi25TOgqyFwuwSXPo3r82C6vIAX669iz:zF0eK4llNo3r5766oz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6713bcefcc79991e3d132eced7780b71ff5c230bfe7e53867586fe660b40b83
Files
-
c6713bcefcc79991e3d132eced7780b71ff5c230bfe7e53867586fe660b40b83.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ