Static task
static1
Behavioral task
behavioral1
Sample
966ec618809cf98eacefab78349bfa768f13a543fb9e1ec04b9f1e4a5e23ec63.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
966ec618809cf98eacefab78349bfa768f13a543fb9e1ec04b9f1e4a5e23ec63.exe
Resource
win10v2004-20230915-en
General
-
Target
966ec618809cf98eacefab78349bfa768f13a543fb9e1ec04b9f1e4a5e23ec63
-
Size
512KB
-
MD5
83278744c4c7fa80b5fb7187affba85b
-
SHA1
4f9e703787436ab81142400afafa183cbd88e9e9
-
SHA256
966ec618809cf98eacefab78349bfa768f13a543fb9e1ec04b9f1e4a5e23ec63
-
SHA512
6fa010bb9edb0a8872fd9816033fd5d0eb2aa404c1624197959efa37d43cb9a36cd434e4f27287b8fdae37c44b1661d5578507546b5aec5e3d1fac32cc2c1fc2
-
SSDEEP
6144:kJm9p+DbxPaGAhx6W/IIIIC99KFV+KpP2eHKs2kcSBaonFc:R9pIbwG06W3FV+KpP2eHxBtna
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 966ec618809cf98eacefab78349bfa768f13a543fb9e1ec04b9f1e4a5e23ec63
Files
-
966ec618809cf98eacefab78349bfa768f13a543fb9e1ec04b9f1e4a5e23ec63.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 943KB - Virtual size: 943KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 74KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 777B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 120.0MB - Virtual size: 120.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ