Static task
static1
Behavioral task
behavioral1
Sample
67392dade9f899857fb967c5bfd0206c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
67392dade9f899857fb967c5bfd0206c.exe
Resource
win10v2004-20231222-en
General
-
Target
67392dade9f899857fb967c5bfd0206c
-
Size
421KB
-
MD5
67392dade9f899857fb967c5bfd0206c
-
SHA1
4f6c2b47fcd1155d8f154414823da670c6dd3b05
-
SHA256
4c9ca5d4c0d75acbcdd7d1da1dbf90e2fd94064c597f9022c619ae4536622006
-
SHA512
cb460029b50801979cf4f09537ef5a96f04a69c6f7da9ab99b48727b714505e38deeec3ce9949589046c8de0c0c3927305560f2ac51409cab99ecde77d0ed2cb
-
SSDEEP
12288:UnRFtj2zJfUbLXEftfLtA8RKO1WHVaTYe700D:CRFtj2dfU3XEFrR41+Ye40D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67392dade9f899857fb967c5bfd0206c
Files
-
67392dade9f899857fb967c5bfd0206c.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 340KB - Virtual size: 339KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ