Static task
static1
Behavioral task
behavioral1
Sample
6bc03fbcd67050d47202c522c20e1aa25f456015d036e227c640294aa866d190.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6bc03fbcd67050d47202c522c20e1aa25f456015d036e227c640294aa866d190.exe
Resource
win10v2004-20240508-en
General
-
Target
6bc03fbcd67050d47202c522c20e1aa25f456015d036e227c640294aa866d190
-
Size
719KB
-
MD5
2f5a495130c281eafa600e949fa31f50
-
SHA1
c6625cc89222c84788f4c25ac23b43e3e753eb6d
-
SHA256
6bc03fbcd67050d47202c522c20e1aa25f456015d036e227c640294aa866d190
-
SHA512
96d7569136d1d709bd48a1a05aa29f6b4c496e6a6d4604f829585b207f1e2320ec3030882f978e8ba940f9b2d2e94c244649b139bd1bfcd8456207dbd00f1ddd
-
SSDEEP
192:xPuTunAtt5Pg1lld07xFVd4yywe/2D4Ec7KdT:tYcAP+PlOzVdNpe/REmi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6bc03fbcd67050d47202c522c20e1aa25f456015d036e227c640294aa866d190
Files
-
6bc03fbcd67050d47202c522c20e1aa25f456015d036e227c640294aa866d190.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ