Static task
static1
Behavioral task
behavioral1
Sample
64bc1e67830ae2e3b4536951114c2e58.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
64bc1e67830ae2e3b4536951114c2e58.exe
Resource
win10v2004-20231215-en
General
-
Target
64bc1e67830ae2e3b4536951114c2e58
-
Size
709KB
-
MD5
64bc1e67830ae2e3b4536951114c2e58
-
SHA1
298a57f1ac491876e2b579062f21a349e195a0ca
-
SHA256
2a8a8c704af8cae9ed61829fb11d8a098f786a41d262365e292a7ceaba431771
-
SHA512
20d4cdbf5a9b80a1c81fbfd21a12a6c512b5ebb911a167bd68e13692ecd4d3070277b0b372816000d0d3830d997aec59c250861ef7b650f720e6ceb5e103ba16
-
SSDEEP
12288:/6w3crdt3xaJFpzrnz9cRdmlhQBRXjIj25csBxZk:/60M8pzrnz9omlhWRjcQk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64bc1e67830ae2e3b4536951114c2e58
Files
-
64bc1e67830ae2e3b4536951114c2e58.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 318KB - Virtual size: 317KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 238KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ