Static task
static1
Behavioral task
behavioral1
Sample
de57eda934deb6b2d279105e908665830d8dfde5a4f026ba70a9194d667b10d1.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
de57eda934deb6b2d279105e908665830d8dfde5a4f026ba70a9194d667b10d1.exe
Resource
win10v2004-20230703-en
General
-
Target
de57eda934deb6b2d279105e908665830d8dfde5a4f026ba70a9194d667b10d1
-
Size
7.0MB
-
MD5
66688977664f0c2f65597c5c0cfc7ead
-
SHA1
bbbefe7e53da0e85bd2aea6184a7c120be3650a8
-
SHA256
de57eda934deb6b2d279105e908665830d8dfde5a4f026ba70a9194d667b10d1
-
SHA512
9f81cc086671ee2a60cce633c8864cc3b4ca35935a4a6a3b30143080a334ae0fa9d673f7130dc1d1c985157865c469168a9b647fa5b88c87796f3ea441243d74
-
SSDEEP
196608:TAvZtfG11bEFU6VKUhLlC2K5+th0QKDGo/PDrKkK9do0gxwJV:BDum0gxw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de57eda934deb6b2d279105e908665830d8dfde5a4f026ba70a9194d667b10d1
Files
-
de57eda934deb6b2d279105e908665830d8dfde5a4f026ba70a9194d667b10d1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 552KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata2 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE