Static task
static1
Behavioral task
behavioral1
Sample
6f74065b8e0c74ee88b7c65a80ec32154672d88009ff94bf6f1f5849bc204854.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6f74065b8e0c74ee88b7c65a80ec32154672d88009ff94bf6f1f5849bc204854.exe
Resource
win10v2004-20240709-en
General
-
Target
6f74065b8e0c74ee88b7c65a80ec32154672d88009ff94bf6f1f5849bc204854
-
Size
910KB
-
MD5
582db8120d5b3d08116aa61293aa6936
-
SHA1
e5d21215fbb1f7c3acb31383eae846fc9833b00c
-
SHA256
6f74065b8e0c74ee88b7c65a80ec32154672d88009ff94bf6f1f5849bc204854
-
SHA512
3e0c1c014aee17ac83280407caa509e6d134da4a6f1a1f7ec1be2a2e0ff3a96a817f64cd349ba6be7ac55b76b42a0feced15f326ec52256d11c48c84f8e5f27c
-
SSDEEP
12288:VUUVEtsXuc2tZHp4nKhQ/CxQ0nAej0aHgS3gCRIHW842ZKf5q+Q9CLCVCICxcbW:bVEmQHeqDnAPQhX842ZKc+skqTSP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f74065b8e0c74ee88b7c65a80ec32154672d88009ff94bf6f1f5849bc204854
Files
-
6f74065b8e0c74ee88b7c65a80ec32154672d88009ff94bf6f1f5849bc204854.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 888KB - Virtual size: 888KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ