Static task
static1
Behavioral task
behavioral1
Sample
2166fd92f5908abd09d83fb66bd6bfec.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2166fd92f5908abd09d83fb66bd6bfec.exe
Resource
win10v2004-20231215-en
General
-
Target
2166fd92f5908abd09d83fb66bd6bfec
-
Size
192KB
-
MD5
2166fd92f5908abd09d83fb66bd6bfec
-
SHA1
45048663bbadc7314deb9a568724675c57601df6
-
SHA256
44ba4168006facb7f6b57765dafb09fa0ed87349d30491c6bcb1a4a57ed50340
-
SHA512
72b6fc1312e840cec62e450d862edd2b6f35b39e080d753836f64a14623ddf74adc2d392235251f8561a733ed92eeac44a20878a8e9e9a84d0584fb5771ebb1b
-
SSDEEP
3072:UuaSRSccmGcCIqyadr0Jurr1bcZNon4nGgcI6l:UuZtcTy4r0wrr1bcD07gcI6l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2166fd92f5908abd09d83fb66bd6bfec
Files
-
2166fd92f5908abd09d83fb66bd6bfec.exe windows:4 windows x86 arch:x86
409dfd4aceb56b412324fa46796a1a6a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvbvm60
ord666
Sections
.MPRESS1 Size: 42KB - Virtual size: 496KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE