Static task
static1
Behavioral task
behavioral1
Sample
d6e88b5b56ae5dc8058ca0ebcbd11da144a664ce9f4cee7e4fdfcaa1fe8637bc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d6e88b5b56ae5dc8058ca0ebcbd11da144a664ce9f4cee7e4fdfcaa1fe8637bc.exe
Resource
win10v2004-20240508-en
General
-
Target
d6e88b5b56ae5dc8058ca0ebcbd11da144a664ce9f4cee7e4fdfcaa1fe8637bc
-
Size
731KB
-
MD5
9a3d47af61c607608d633088780d1086
-
SHA1
7fd113b7e324689b999e0225cc16173f669fd24c
-
SHA256
d6e88b5b56ae5dc8058ca0ebcbd11da144a664ce9f4cee7e4fdfcaa1fe8637bc
-
SHA512
9f3da71e97746e8253f626f409b9c88167749fe1a1815491ad1f5ff669432465775e4aa6f217e35416e254e7e863d66de733c5033d8f84878ce1d8ce320c2b1c
-
SSDEEP
12288:W+0MVCW4TGOz+JQ3QWEc6BiNmHFRhFpOO4Tz+RW+9xtGfVH8:W+0MVCW4TGOIQ3JEc9NmHhVoExtGfVH8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6e88b5b56ae5dc8058ca0ebcbd11da144a664ce9f4cee7e4fdfcaa1fe8637bc
Files
-
d6e88b5b56ae5dc8058ca0ebcbd11da144a664ce9f4cee7e4fdfcaa1fe8637bc.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 724KB - Virtual size: 723KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ