Static task
static1
Behavioral task
behavioral1
Sample
66651effcfaeeda4092379d1a64731c5.exe
Resource
win7-20230220-en
General
-
Target
66651effcfaeeda4092379d1a64731c5.exe
-
Size
3.5MB
-
MD5
66651effcfaeeda4092379d1a64731c5
-
SHA1
9e141a598d379081a42256b7e8964259d8163d74
-
SHA256
ead5ece96523e3ff2fef6e9c60f65ae6cdd160bef1c32ced53b4e4f3d43ddb58
-
SHA512
900eedb30a7e9ee67e2609dce0cc3d2d0df2afaeca23c8a5209d3f0f9bb61a3fa2b731519bba82cfadc183433eee74a3aef72d4b2159cb797409116c4832deea
-
SSDEEP
98304:XAD2yUozo9I2lYR0lcnYMMlX6gMEcGHVK:RB9feR0qpMV/MEcJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66651effcfaeeda4092379d1a64731c5.exe
Files
-
66651effcfaeeda4092379d1a64731c5.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ