Static task
static1
Behavioral task
behavioral1
Sample
6d3257fac6275364b7dc3073e071cd1d6c5bd12e7e0c6baa4ef5f3137706ff65N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6d3257fac6275364b7dc3073e071cd1d6c5bd12e7e0c6baa4ef5f3137706ff65N.exe
Resource
win10v2004-20240802-en
General
-
Target
6d3257fac6275364b7dc3073e071cd1d6c5bd12e7e0c6baa4ef5f3137706ff65N
-
Size
4.8MB
-
MD5
75d7fecc09ab2b74775c25dd1c6f8f10
-
SHA1
5e2e2c94e2fff29fbb6979d1d1a711ba5dd18c9c
-
SHA256
6d3257fac6275364b7dc3073e071cd1d6c5bd12e7e0c6baa4ef5f3137706ff65
-
SHA512
9efc2a65b6a35b0fc9b81b403a81accb24dfecc118bad54ac6cca1afeb752627919ac811b009df61a1342262ac634e08bacf5fe01a025d126aa96c5f0c14b49c
-
SSDEEP
98304:hdbC3wwyoSIDWqJuSEUjLc1U0YfIsjHIMZI+glScbOH4+Gg602X1OTQjTvCXWSKk:hdbC3wwyoSIDWqJuSEUjLc1U0YpfgiHP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6d3257fac6275364b7dc3073e071cd1d6c5bd12e7e0c6baa4ef5f3137706ff65N
Files
-
6d3257fac6275364b7dc3073e071cd1d6c5bd12e7e0c6baa4ef5f3137706ff65N.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1018KB - Virtual size: 1017KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14.8MB - Virtual size: 14.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ