Static task
static1
Behavioral task
behavioral1
Sample
20e967b1356194e2b61e3c501cf206b8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
20e967b1356194e2b61e3c501cf206b8.exe
Resource
win10v2004-20231222-en
General
-
Target
20e967b1356194e2b61e3c501cf206b8
-
Size
880KB
-
MD5
20e967b1356194e2b61e3c501cf206b8
-
SHA1
152fc0297ada8ef8a15511b1000b7af5e20fe0a1
-
SHA256
065384057fde4597cc5aaf21e3794ad534ad8936bfd5e778eff60708c4a5b589
-
SHA512
ae360851835ad88522ae449430cbf53fc0da9690f83b74bd1270e4b0e41635ef8ccd3d0cb95c3b6c8fa8d813cba95e7e1cad826439b887370b06ad4716b5b5cd
-
SSDEEP
12288:VRyTSktU4g/n/t0EW5A0zyYvJwQ5oAlK+GE4vebIk6bQQ52LgRg08y5HpnrxT2cy:fStU4gf2EW5A2DJr/kS4vGIk6v3Hl2I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20e967b1356194e2b61e3c501cf206b8
Files
-
20e967b1356194e2b61e3c501cf206b8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.data Size: 820KB - Virtual size: 820KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.asprsc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ