Static task
static1
Behavioral task
behavioral1
Sample
66338063613eb3416de11747b5f49ab0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
66338063613eb3416de11747b5f49ab0.exe
Resource
win10v2004-20231222-en
General
-
Target
66338063613eb3416de11747b5f49ab0
-
Size
81KB
-
MD5
66338063613eb3416de11747b5f49ab0
-
SHA1
03165ee1e9cad1e51afba267d34bd71d77f83724
-
SHA256
c75ddb332785dcbb50f43af71dd5e1a0b2d41a00960cbf47f0568d483c98e1cc
-
SHA512
b5942166b3a5b7287a7779800f572ad46eaede7bdad1ae9d48212c6714e7c7faa91b13f6c209219657e91b4994c223b0d45aa593d6180338c4b0e7563e8de303
-
SSDEEP
1536:dsr0ybSaLCypDU5nQhOI0ydbauH/iITwrTGEz:Or0YSaLCypDU5n5IVba4agwjz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66338063613eb3416de11747b5f49ab0
Files
-
66338063613eb3416de11747b5f49ab0.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ