Static task
static1
Behavioral task
behavioral1
Sample
566d45332072abc9a07bf96ce9b90e2c57a3414f6625ebdf97616a1c30cdae81.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
566d45332072abc9a07bf96ce9b90e2c57a3414f6625ebdf97616a1c30cdae81.exe
Resource
win10v2004-20231222-en
General
-
Target
566d45332072abc9a07bf96ce9b90e2c57a3414f6625ebdf97616a1c30cdae81
-
Size
321KB
-
MD5
2a7611d25fa50349e521dbc9289e0925
-
SHA1
0d10eafa647f0fd5a298b74b469bf7153616c341
-
SHA256
566d45332072abc9a07bf96ce9b90e2c57a3414f6625ebdf97616a1c30cdae81
-
SHA512
040b9796a64beec0ac366930ed641dc8c72e5b473501f14e7fde3944d1325fbb4acb311fdfc23754bf7b1e9b18de773da1a6806f3cc6adf56a398c50e4dc98dc
-
SSDEEP
6144:FNGHFwPXsr0VwvUfme2DwAKnul0QSQzjaP72:XGlw80VLfme2DM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 566d45332072abc9a07bf96ce9b90e2c57a3414f6625ebdf97616a1c30cdae81
Files
-
566d45332072abc9a07bf96ce9b90e2c57a3414f6625ebdf97616a1c30cdae81.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 279KB - Virtual size: 278KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ