Static task
static1
Behavioral task
behavioral1
Sample
20566a8ebfda14e346b24be7728557e5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
20566a8ebfda14e346b24be7728557e5.exe
Resource
win10v2004-20231222-en
General
-
Target
20566a8ebfda14e346b24be7728557e5
-
Size
1024KB
-
MD5
20566a8ebfda14e346b24be7728557e5
-
SHA1
830ede87753cf281cee0e180b1feeab6705a2da6
-
SHA256
b23bc9c10280bce4262b06b60c4b72970da6a431f98a9825c150cfd4c2cb921b
-
SHA512
978061f743d1d2dc687cec06799b8af85d0c93831e1da8f62ad72c76dffe8546de81783c2ad5817ade5239e6d12dd0e8483bf53df5e8d3d2c92bc6f33ff0a882
-
SSDEEP
24576:YAEBt4ctVrFsMoDGVKGL11ARDGPh3FmGv3Tx:6jtVr28Wgjx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20566a8ebfda14e346b24be7728557e5
Files
-
20566a8ebfda14e346b24be7728557e5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 263B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE