Static task
static1
Behavioral task
behavioral1
Sample
066fe6c50efdfae06000a05041b80e9c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
066fe6c50efdfae06000a05041b80e9c.exe
Resource
win10v2004-20231222-en
General
-
Target
066fe6c50efdfae06000a05041b80e9c
-
Size
388KB
-
MD5
066fe6c50efdfae06000a05041b80e9c
-
SHA1
c3bd2dbb6a3d0e5db919e3d9e76d2dd3867ac663
-
SHA256
628e0883199ea773ee662074a19a26c2b11990df6286378bbc229905ce5f76e3
-
SHA512
fd59133b1ecec32141b68ff3e993929039945becbb59f8686745872ec2ba7f8008ac4aea7d04915d92f0453855e7f7f78a7224bb6345b385b93b44da66849d21
-
SSDEEP
6144:/xrEmcTGAdTgUbF5Dcchbbbj1Dbbb1h0VqsInWgSzkNiREpKgfgz8mSY4:+smbF5DcchbbbZDbbb1hWqjQEpKkE4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 066fe6c50efdfae06000a05041b80e9c
Files
-
066fe6c50efdfae06000a05041b80e9c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE