Static task
static1
Behavioral task
behavioral1
Sample
1664680e97d72c7407000bc9f689a381.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1664680e97d72c7407000bc9f689a381.exe
Resource
win10v2004-20231222-en
General
-
Target
1664680e97d72c7407000bc9f689a381
-
Size
204KB
-
MD5
1664680e97d72c7407000bc9f689a381
-
SHA1
09c24032dbb25804dbb2c70543eba52ebaa6fbbe
-
SHA256
e57e2d41caec397c8e68a9f8f37ba8ec092b55857ffdd4726786ebe9184d3058
-
SHA512
a51982609543531aae1c5c3af03d5b3b026eac9a89dff87744bea483c6dc6b75842132763d21e6415cd33230a876edf72a55af70a50a4361de789563d1b2e645
-
SSDEEP
6144:HWqLbum2rmclDXzsxF67rJaV9J3dxkIzTmn8l6Xf676ARl:2q+XDXzK4rq9xduIzTmn8wvf6l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1664680e97d72c7407000bc9f689a381
Files
-
1664680e97d72c7407000bc9f689a381.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 277KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37.3MB - Virtual size: 37.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ