Static task
static1
Behavioral task
behavioral1
Sample
66150920c3d264d1f9560455b72daafd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
66150920c3d264d1f9560455b72daafd.exe
Resource
win10v2004-20231222-en
General
-
Target
66150920c3d264d1f9560455b72daafd
-
Size
918KB
-
MD5
66150920c3d264d1f9560455b72daafd
-
SHA1
401f883ee88494100c02bd267a4ec17b0d86df8b
-
SHA256
6c5ffe9353e66e5c18519b3b2e06ee78dc4c0a33b3e9bf1a216856b85268e9cb
-
SHA512
4919b84903c1c8fd5a87d6474cc1ff412acfdaae20bf41e5d7d3f4ce8bf17da093a8f64ab858100875dbedc16ab74851919c885064c113b6704b3e9adf6b83e8
-
SSDEEP
12288:QpWBSym8hFavlsVZBGxPvQjjIK06v90ZjJHdJ1zopzc9wc:FIuilsZGZgs6v907WpzDc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66150920c3d264d1f9560455b72daafd
Files
-
66150920c3d264d1f9560455b72daafd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 428KB - Virtual size: 427KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 39B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 438KB - Virtual size: 438KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ