F:\Office\Target\x86\ship\postc2r\x-none\msosrec.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6cbbc0fae963853b44deb227e87ae3b0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6cbbc0fae963853b44deb227e87ae3b0N.exe
Resource
win10v2004-20240709-en
General
-
Target
6cbbc0fae963853b44deb227e87ae3b0N.exe
-
Size
1.5MB
-
MD5
6cbbc0fae963853b44deb227e87ae3b0
-
SHA1
26f833b547d27ea801dd7c090719bc47ddd9480a
-
SHA256
d3ba470ff1cac015a806593503e9b18d4a129af32bfe592539ed4d1a04c57356
-
SHA512
bad5da9f2cdb71d7ec2962b03215fb3f36756a3a1ac32f574c77000af3d012062d4dcf3566756e6d5c82a98493c3d9784b1635c405baf2d30fa9ac9f49cc9346
-
SSDEEP
24576:04HOsRgiip8JOBE6EhWE6Ehex/B5ewYsKUnNzO0LdXewKNnpYx/WnSyhbzv8O0X:04usueJOD0O0iBQCKMN7pXRKNnpAWSym
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6cbbc0fae963853b44deb227e87ae3b0N.exe
Files
-
6cbbc0fae963853b44deb227e87ae3b0N.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c2r Size: 512B - Virtual size: 480B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ