Static task
static1
Behavioral task
behavioral1
Sample
f66bf1700f1f16d3ca49cdf1b49b580239a7c89b10e64805e2c183d35b8dd943.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f66bf1700f1f16d3ca49cdf1b49b580239a7c89b10e64805e2c183d35b8dd943.exe
Resource
win10v2004-20230915-en
General
-
Target
f66bf1700f1f16d3ca49cdf1b49b580239a7c89b10e64805e2c183d35b8dd943
-
Size
306KB
-
MD5
0796d08390abbdb8db729e20412d9e4b
-
SHA1
3dd8a9a0457f7e9c62b524d7d68ed122ba061507
-
SHA256
f66bf1700f1f16d3ca49cdf1b49b580239a7c89b10e64805e2c183d35b8dd943
-
SHA512
b84827ee9f34e98222841cb8152fb07576d30818f001c0496450d5a1093b7f7e6cc91556d6905d486518d537f6c789dd7ef0b0bb6c24c458014a85d0006b79ac
-
SSDEEP
6144:9hgpPx9hFXB9jH7n3U+cO/p0l6m7vuTuytumMU:XgPx97LUO/p0l6mSTuytwU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f66bf1700f1f16d3ca49cdf1b49b580239a7c89b10e64805e2c183d35b8dd943
Files
-
f66bf1700f1f16d3ca49cdf1b49b580239a7c89b10e64805e2c183d35b8dd943.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 944KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 305KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE