Static task
static1
Behavioral task
behavioral1
Sample
66fe37b758c15b2039993f69a9b20ceb6545e7fc888856d7e7d47ea3720b7576.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
66fe37b758c15b2039993f69a9b20ceb6545e7fc888856d7e7d47ea3720b7576.exe
Resource
win10v2004-20231025-en
General
-
Target
66fe37b758c15b2039993f69a9b20ceb6545e7fc888856d7e7d47ea3720b7576
-
Size
512KB
-
MD5
9bbbaaec9081375a295b8f5aa74edc5c
-
SHA1
b6fef63c8dae77473fc3d1411c288bef84084d59
-
SHA256
66fe37b758c15b2039993f69a9b20ceb6545e7fc888856d7e7d47ea3720b7576
-
SHA512
882fe107940288b30fac508cc0150bb4608cb691b4f7c9f416ae661e83f1063a3803383e050657b4640027ff4ba14d9af40e0083c5681688e533155b15b4ad51
-
SSDEEP
12288:rwLUaLQz/YEE6JNfi1Br8MclwcN6IRq11mj/:rwez/z75iilhNTRimT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66fe37b758c15b2039993f69a9b20ceb6545e7fc888856d7e7d47ea3720b7576
Files
-
66fe37b758c15b2039993f69a9b20ceb6545e7fc888856d7e7d47ea3720b7576.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 760KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.msvcjmc Size: - Virtual size: 552B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: - Virtual size: 270B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hyfluh0 Size: - Virtual size: 666KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hyfluh1 Size: 936KB - Virtual size: 935KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ