Static task
static1
Behavioral task
behavioral1
Sample
64769c68d4197668e66fd34bf0cdd5ae.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
64769c68d4197668e66fd34bf0cdd5ae.exe
Resource
win10v2004-20231215-en
General
-
Target
64769c68d4197668e66fd34bf0cdd5ae
-
Size
180KB
-
MD5
64769c68d4197668e66fd34bf0cdd5ae
-
SHA1
aa61caf97d242d9e2a9c5ab8d6bfe2b23c662bb5
-
SHA256
a14ab84d589348fa7563d1120c7c7bdf44c0392fbcfcf8efe281e7bbb9df66c7
-
SHA512
5d24d1e9eba1970ccf1a05f0f1b17eea542701796fc510c4a78338346fa64e2e609c9ebdce9f6129d385086d53ca661e6402e90c47d91e9d9891271c42746b05
-
SSDEEP
3072:MhtUoJ2XYxu99MinU8pq5pYw0CQ+gq6GjLMeIzd3CSE+hc1hyQCgyzJbgQsfy:MhaoJ2XYA9/nUYq5pOC1gqI3CSE++hyr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64769c68d4197668e66fd34bf0cdd5ae
Files
-
64769c68d4197668e66fd34bf0cdd5ae.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE