Static task
static1
Behavioral task
behavioral1
Sample
067d960ab0e4f78fee3d7dfedf86f610.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
067d960ab0e4f78fee3d7dfedf86f610.exe
Resource
win10v2004-20231215-en
General
-
Target
067d960ab0e4f78fee3d7dfedf86f610
-
Size
312KB
-
MD5
067d960ab0e4f78fee3d7dfedf86f610
-
SHA1
c1eb805b7126c6b81a611fe7217485a5b8fc06d0
-
SHA256
4ee98334619b4489f7731f0895690c265a5208d4650fcb4b4592c0fd91681a47
-
SHA512
c556e42a0081248d10a6b509362a1baf2b630f69ef8c18a20d318e343e9506a9efbd081ec6b63676e92b0b0d2ffd4906b1ed9b1298e6c664bed6380eedbfe58f
-
SSDEEP
6144:73WrPH4lAsDRuh+WLtIN+lubmg1FFV/cyMOdnkdbg9i/g4/fxbsWbGAJmQBQ3P0T:uPk5Ih+GKN+wRFVEhqd4/iWbNdBkP0b/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 067d960ab0e4f78fee3d7dfedf86f610
Files
-
067d960ab0e4f78fee3d7dfedf86f610.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 282KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ