Static task
static1
Behavioral task
behavioral1
Sample
66ea20aa88a447538ed3bc875f15e9c0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
66ea20aa88a447538ed3bc875f15e9c0.exe
Resource
win10v2004-20231215-en
General
-
Target
66ea20aa88a447538ed3bc875f15e9c0
-
Size
135KB
-
MD5
66ea20aa88a447538ed3bc875f15e9c0
-
SHA1
6b5ead18c4a7053e104045b2f7787928226b6330
-
SHA256
19dc8bfc23be3b30d60392bd6682c1fb54fc39535c9681b2084dfacf7d333914
-
SHA512
c0d3c72722c225a140965a1f2fe47fdec2c8bb96322c0f4d3dab56231c5ceb32d6b23326e8ceb24bf250114352f9c1a0de0b25246e27bffb943842a8a9506e06
-
SSDEEP
3072:E/ZGBk4qw3/+iN79hCfV7xvmHEViB+x4gfnout:E/ZwvpJ9hCNR/xhnoS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66ea20aa88a447538ed3bc875f15e9c0
Files
-
66ea20aa88a447538ed3bc875f15e9c0.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 492KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 134KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE