Static task
static1
Behavioral task
behavioral1
Sample
80dee05745916b0405d1e1959ca4ea1c62f2f9dce20bb45c7a0744ed6300798e.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
80dee05745916b0405d1e1959ca4ea1c62f2f9dce20bb45c7a0744ed6300798e.exe
Resource
win10v2004-20231020-en
General
-
Target
80dee05745916b0405d1e1959ca4ea1c62f2f9dce20bb45c7a0744ed6300798e
-
Size
6.6MB
-
MD5
e2cc32243b4de9b2e39d2852f2989923
-
SHA1
ddfa3dbdc090dfe72bcf00c80b770c42baece768
-
SHA256
80dee05745916b0405d1e1959ca4ea1c62f2f9dce20bb45c7a0744ed6300798e
-
SHA512
dc47efc6c222630e5079f5706fe4aeaa36b938ab0ddd68ce7fb5e3434f50693babfb996d60ec167927121f6f8f598ee1c8b79477adc5b68871cbdbc68602b828
-
SSDEEP
196608:qrRzYDX8xlMqRZ0guCI7GHPdHJ0WQ8vE6dvn:qFzYb8xlMqRu0ThJE8vlh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80dee05745916b0405d1e1959ca4ea1c62f2f9dce20bb45c7a0744ed6300798e
Files
-
80dee05745916b0405d1e1959ca4ea1c62f2f9dce20bb45c7a0744ed6300798e.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 837KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 88KB - Virtual size: 341KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 6KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 931KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 70KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.winlice Size: - Virtual size: 7.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 16B - Virtual size: 4KB
IMAGE_SCN_MEM_READ