Static task
static1
Behavioral task
behavioral1
Sample
d00af80966d6be8ee7af19c6c96a0f0de7ad8b68f4991d16eb038710a8d4458f.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
d00af80966d6be8ee7af19c6c96a0f0de7ad8b68f4991d16eb038710a8d4458f.exe
Resource
win10v2004-20230824-en
General
-
Target
d00af80966d6be8ee7af19c6c96a0f0de7ad8b68f4991d16eb038710a8d4458f
-
Size
3.8MB
-
MD5
6d65ea5ca961ce4530626ece5b49899c
-
SHA1
4cce9b6f5f098b93f2b9305081dd56fb5ccc8c15
-
SHA256
d00af80966d6be8ee7af19c6c96a0f0de7ad8b68f4991d16eb038710a8d4458f
-
SHA512
7838714f044347b572d246cfabe69a5bae28cbc114b4c1732b90b808252c7d516c7db8bf6cef23474c84022f43209e89e52806c181c593b89083d8dd66ca8bda
-
SSDEEP
98304:EZf+hQcrpmsLAR6KTZvCkKpE5dgQKEBkp4N:EZfeQctmsEE8ZcE5dgQKElN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d00af80966d6be8ee7af19c6c96a0f0de7ad8b68f4991d16eb038710a8d4458f
Files
-
d00af80966d6be8ee7af19c6c96a0f0de7ad8b68f4991d16eb038710a8d4458f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE