Static task
static1
Behavioral task
behavioral1
Sample
66670cf87e75219a6f1d00dcc864ece3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
66670cf87e75219a6f1d00dcc864ece3.exe
Resource
win10v2004-20231222-en
General
-
Target
66670cf87e75219a6f1d00dcc864ece3
-
Size
83KB
-
MD5
66670cf87e75219a6f1d00dcc864ece3
-
SHA1
1ef0cbc7a84853ef5991c4c61f0d2463bbe9f7aa
-
SHA256
25378a867ac2ef5611d54b2fa2c752226376b27ab98dd2ee93f411fd0b496bf5
-
SHA512
72e449e9ce897e03db3bfb9aedade5e10bc7a77d302a2f70ef1345498b2c30a5e86ee3f0d236a2682fb70ca4b0d4efc65c1fc7b660012017970a06f5f95342bc
-
SSDEEP
1536:d0FeIlOQvXfpvzu4FXx7evnjBmSl5z/SeF+7r6T1pg/6TlNHgIM37IC3:WlOQ5C43qvjBBz/Pa6T1eiTlNHgIM37I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66670cf87e75219a6f1d00dcc864ece3
Files
-
66670cf87e75219a6f1d00dcc864ece3.exe windows:4 windows x86 arch:x86
8010fc75a1d7efab289280f9d1490e96
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawIcon
DrawCaption
DestroyIcon
CreateDialogParamA
CreateDialogIndirectParamA
CreateAcceleratorTableA
CopyRect
CopyImage
CharUpperBuffA
CharToOemA
CharPrevA
CharNextA
ChangeMenuA
ActivateKeyboardLayout
kernel32
GetLocalTime
lstrlenA
lstrcpyA
lstrcmpiA
lstrcatA
UnmapViewOfFile
TlsFree
Sleep
SetLastError
SetEndOfFile
RaiseException
OpenFileMappingA
OpenFile
LocalAlloc
LoadResource
ExitThread
FindResourceA
GetDateFormatA
GetLastError
GetStartupInfoA
GetSystemTime
GetVersionExA
LoadLibraryA
Sections
.text Size: 1024B - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 63KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data0 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE