Static task
static1
Behavioral task
behavioral1
Sample
14676d77f6318958c1391ebb0d674334.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
14676d77f6318958c1391ebb0d674334.exe
Resource
win10v2004-20231215-en
General
-
Target
14676d77f6318958c1391ebb0d674334
-
Size
193KB
-
MD5
14676d77f6318958c1391ebb0d674334
-
SHA1
f54c51b137687564d538464914e06eb9d7bbf045
-
SHA256
dc7d175594e3611dd2f5cc741479776b948b498c7c7340ee0747ccdfacb774a8
-
SHA512
2b0057f619986c96bcbab0cfd92eb4445d0417cb9bdb6a00778e03dfe7c9bc5c3de7709768bda9b0443ac580e7061f56a3f8f3851c5a0f8aee3035aa51652349
-
SSDEEP
6144:EW/AqxhlUMaTCjOgQ5lBDsPwUBUnQBee3e9c:EWInMrq5lxGBBeeuO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14676d77f6318958c1391ebb0d674334
Files
-
14676d77f6318958c1391ebb0d674334.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 320KB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nzbucpjy Size: 860KB - Virtual size: 860KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xwkbgiqb Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE