Static task
static1
Behavioral task
behavioral1
Sample
f6a5ce5d5d84f50e5277ab4324241b4fe969949881f6dd6f7f41a42b4bfc6837.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6a5ce5d5d84f50e5277ab4324241b4fe969949881f6dd6f7f41a42b4bfc6837.exe
Resource
win10v2004-20241007-en
General
-
Target
f6a5ce5d5d84f50e5277ab4324241b4fe969949881f6dd6f7f41a42b4bfc6837
-
Size
433KB
-
MD5
0f39858fe5cf130b6ff559c97f47e485
-
SHA1
596d20a23f6b16ceab17443f02993a328de3491f
-
SHA256
f6a5ce5d5d84f50e5277ab4324241b4fe969949881f6dd6f7f41a42b4bfc6837
-
SHA512
00a239aaad4ff5de8efaaee148e71639c4a8c33e70a9bc18f349c631bd95b7c9f8b88cc4cff24bc16cb01dd6cad6cbe298de8415c544b680653774d0bc5979fd
-
SSDEEP
12288:astYQg/ZIHkm44b5Pfu7z1zBzTlVQivJEXu3V7m:RtiqHJlPG7lBzLQiv8oV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6a5ce5d5d84f50e5277ab4324241b4fe969949881f6dd6f7f41a42b4bfc6837
Files
-
f6a5ce5d5d84f50e5277ab4324241b4fe969949881f6dd6f7f41a42b4bfc6837.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 431KB - Virtual size: 430KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ