Static task
static1
Behavioral task
behavioral1
Sample
6a5f097743ed7da46f5a35c055047d458a8831abebca6dd587f06108527c1b4e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6a5f097743ed7da46f5a35c055047d458a8831abebca6dd587f06108527c1b4e.exe
Resource
win10v2004-20240426-en
General
-
Target
6a5f097743ed7da46f5a35c055047d458a8831abebca6dd587f06108527c1b4e
-
Size
371KB
-
MD5
1a5bf27481f1f48dd1a37a66acf98c98
-
SHA1
c4f194debedb3d398f3a077dc4d15a24f0aef363
-
SHA256
6a5f097743ed7da46f5a35c055047d458a8831abebca6dd587f06108527c1b4e
-
SHA512
4f517dad0bf162b872f1a3cc39cf00599b375a701ed55b4eec3a483a1205b7bce50cb8bc0f9e81f977e30afc4af4cd249c1fef546d850e443c39065ff1139288
-
SSDEEP
6144:P/+X+HXSaNNz2gFjHF4OMjG0cpQOh84e/MLdn7JVLuzv1zerCgTtpAtd6vp:X+XMXSMcQbwcnh5eOn7ziUrrRpAa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6a5f097743ed7da46f5a35c055047d458a8831abebca6dd587f06108527c1b4e
Files
-
6a5f097743ed7da46f5a35c055047d458a8831abebca6dd587f06108527c1b4e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 348KB - Virtual size: 347KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ