Static task
static1
Behavioral task
behavioral1
Sample
d76858655f204d8257e2d46dc03120c2e35ef06132a182f8d95711c08c4bc668.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
d76858655f204d8257e2d46dc03120c2e35ef06132a182f8d95711c08c4bc668.exe
Resource
win10v2004-20231020-en
General
-
Target
d76858655f204d8257e2d46dc03120c2e35ef06132a182f8d95711c08c4bc668
-
Size
6.9MB
-
MD5
06838828f0287e7015e76a4ccbc4686d
-
SHA1
e008a6b2669d2a9043457ba1c0afa6b9c468772b
-
SHA256
d76858655f204d8257e2d46dc03120c2e35ef06132a182f8d95711c08c4bc668
-
SHA512
7025f54a2ea7c3ebebcc096511f125d76be49f751ac4501a9e8d10ff6ca6c1c80cf263fa9f6c62fe1e16bf9338257f5d2b34317d428164f40c9b261b561a5a78
-
SSDEEP
98304:kTVrJoUhm5jhi62ZMXQobYV+/hv+32bAltf/Gp4:kTV6Ushi62OAe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d76858655f204d8257e2d46dc03120c2e35ef06132a182f8d95711c08c4bc668
Files
-
d76858655f204d8257e2d46dc03120c2e35ef06132a182f8d95711c08c4bc668.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 297KB - Virtual size: 721KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Gև��2� Size: 2308.8MB - Virtual size: 10.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ktsleabe Size: 879KB - Virtual size: 880KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ekyoqzub Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE