Static task
static1
Behavioral task
behavioral1
Sample
6193fb0e26e44ba3c85f9f32f056402286186bf5ceacf75d852dcc4fbca7b120.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6193fb0e26e44ba3c85f9f32f056402286186bf5ceacf75d852dcc4fbca7b120.exe
Resource
win10v2004-20240508-en
General
-
Target
6193fb0e26e44ba3c85f9f32f056402286186bf5ceacf75d852dcc4fbca7b120
-
Size
453KB
-
MD5
0e869dcdc61c5df29a0f421019458498
-
SHA1
659ccd13b8c9fe6db163fc9faef046a0d3c663b2
-
SHA256
6193fb0e26e44ba3c85f9f32f056402286186bf5ceacf75d852dcc4fbca7b120
-
SHA512
adc088e471a6f0ab04632169eef6de8c1cff4c580a09049dcef853a7b19406c1ad35145895849683ef5f088e837baf81755511e407eaa6f45c1c3f76902e2dce
-
SSDEEP
192:xPuTunAtt5Pg1lld07xFVd4yywe/2D4Ec7KdT:tYcAP+PlOzVdNpe/REmi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6193fb0e26e44ba3c85f9f32f056402286186bf5ceacf75d852dcc4fbca7b120
Files
-
6193fb0e26e44ba3c85f9f32f056402286186bf5ceacf75d852dcc4fbca7b120.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ