Static task
static1
Behavioral task
behavioral1
Sample
660ab4d147929bb9c05e98e42245a510.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
660ab4d147929bb9c05e98e42245a510.exe
Resource
win10v2004-20231222-en
General
-
Target
660ab4d147929bb9c05e98e42245a510
-
Size
3.6MB
-
MD5
660ab4d147929bb9c05e98e42245a510
-
SHA1
fcdb5d88eea07a22717f78b21b738d31833d0dd2
-
SHA256
e85fc1e319bbe8bcf0dcc48616c222b44dc2aacde0e13484fe9f638a689d3c8f
-
SHA512
72f5583ff8d8faea985e2c9d85f34797788b1c9bf26259200638b46c793226a3037c173fd8dd2451e76d353251136bd811985c60fb2793d7c789ac367c0669f3
-
SSDEEP
49152:NepaO3pqbtMkGYGw5fBwP94TG3yLYyktliSnsjf5EFtLU3e:NKpqbnGAS3NiosmU3e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 660ab4d147929bb9c05e98e42245a510
Files
-
660ab4d147929bb9c05e98e42245a510.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 150KB - Virtual size: 58.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 109B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rodata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.version Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ