Static task
static1
Behavioral task
behavioral1
Sample
08066399.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
08066399.exe
Resource
win10v2004-20230220-en
General
-
Target
08066399.exe
-
Size
175KB
-
MD5
3ca847adc260b36770d6b2bb338361e1
-
SHA1
e1d24ecfe19e54ecd33b86bff39bc29d4a6ba81a
-
SHA256
77fd84b99c6cf0578f03ccef951557bee05830739fd85e15cf6d06ec61d652fb
-
SHA512
dd1e68717d36f54f04b007792d9d9becc7a612a8cfcfc14e44095c5cf2c5def84674c5979ff3473b6a78a5911b3a08e3b1dc312262b4551fc5edc84e978903ac
-
SSDEEP
3072:QEkJY4RpJ8JjSGA4DCK2uSTETbEzOgkK:4JPAOP4D4uST8sOg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08066399.exe
Files
-
08066399.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 131KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ