Static task
static1
Behavioral task
behavioral1
Sample
6dfaf8db3a38f38866436cfb000cdbae6bce3dc6f5e8a5c27b9ccd8d8fbb3467.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6dfaf8db3a38f38866436cfb000cdbae6bce3dc6f5e8a5c27b9ccd8d8fbb3467.exe
Resource
win10v2004-20240704-en
General
-
Target
6dfaf8db3a38f38866436cfb000cdbae6bce3dc6f5e8a5c27b9ccd8d8fbb3467
-
Size
1.0MB
-
MD5
f0435ebff7330a92784ca2a11cd9c96b
-
SHA1
0d508594e9a4ab3767cf265182d09a1d875b6340
-
SHA256
6dfaf8db3a38f38866436cfb000cdbae6bce3dc6f5e8a5c27b9ccd8d8fbb3467
-
SHA512
207c26bad927156de96c1cf7e823e73dc7e950b30be7ae3bfe4acb94c3ab0b7a3a47c71fb582d1e95178c3f5ff11ee3a49767443391d8c8c69afd0cd65c45b20
-
SSDEEP
12288:l8FzRZVveTJ1VZjYqWEsnTTC2emkMA9W9UqAsORNYyjax4oRfwadH9bD3gnn:6FzDVvSUqWEsnvVO9OcNYHt33qn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6dfaf8db3a38f38866436cfb000cdbae6bce3dc6f5e8a5c27b9ccd8d8fbb3467
Files
-
6dfaf8db3a38f38866436cfb000cdbae6bce3dc6f5e8a5c27b9ccd8d8fbb3467.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ