Static task
static1
Behavioral task
behavioral1
Sample
a6c73d3fd800d1c7dad043aee0a4b4914d59de6abbd0b62669871d20e23f3cf4.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a6c73d3fd800d1c7dad043aee0a4b4914d59de6abbd0b62669871d20e23f3cf4.exe
Resource
win10v2004-20241007-en
General
-
Target
a6c73d3fd800d1c7dad043aee0a4b4914d59de6abbd0b62669871d20e23f3cf4
-
Size
419KB
-
MD5
7298e8f719232f063d3f9ce3c9e97dc7
-
SHA1
a3c2ff2ea0796553dd040b557531fd82af2dff1b
-
SHA256
a6c73d3fd800d1c7dad043aee0a4b4914d59de6abbd0b62669871d20e23f3cf4
-
SHA512
145e91ed5079e5feb70803c01946df11b0cf69173d37df858538853a077672bb16b7b2484f28c013651f17dc419f2d90653bc79a17ecb1059b15b00ce9dc8a1c
-
SSDEEP
6144:cObCO65TIwvek23qnX2r7uHrT+6v2SWgG:hGO65ZekKsX2OHn+6v2SWb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6c73d3fd800d1c7dad043aee0a4b4914d59de6abbd0b62669871d20e23f3cf4
Files
-
a6c73d3fd800d1c7dad043aee0a4b4914d59de6abbd0b62669871d20e23f3cf4.exe windows:6 windows x64 arch:x64
a05830ef2d90f9a9e89690999c763beb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetFileSize
ReadFile
CloseHandle
CreateFileA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 548B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 415KB - Virtual size: 414KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ