Static task
static1
Behavioral task
behavioral1
Sample
660fcad5fc5eff00edc7dc653aec0b30.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
660fcad5fc5eff00edc7dc653aec0b30.exe
Resource
win10v2004-20231222-en
General
-
Target
660fcad5fc5eff00edc7dc653aec0b30
-
Size
280KB
-
MD5
660fcad5fc5eff00edc7dc653aec0b30
-
SHA1
d33ba528085da43de00f56a2c382072709789223
-
SHA256
af8b2c707229652b0b8f0ab589b35ad0c15ee2fdfdaa17f8dc856cbbb374dae5
-
SHA512
b3438fc80de10998ca718124b0b58b3499b803dd1417f971d0d52f3ca817728e4ca303a45c0eccf51c62ebe886ca8620de22e24eb564bba4e5673e94ac663766
-
SSDEEP
1536:cSFBflpeFzOyHh3rZ/X7E221N0Fj1dNEiH05sm19uI1SQI73+kkwm:cSFBfl0hV/X712ov505sca+v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 660fcad5fc5eff00edc7dc653aec0b30
Files
-
660fcad5fc5eff00edc7dc653aec0b30.exe windows:4 windows x86 arch:x86
e7f43a3ffff346c391e68f1136a2e439
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceNamesA
FreeResource
LocalAlloc
MapViewOfFile
UnmapViewOfFile
VirtualAlloc
EnumResourceLanguagesW
msvcrt
_stricmp
fwprintf
rand
srand
time
wcscmp
wcslen
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ