Static task
static1
Behavioral task
behavioral1
Sample
66986de0ccfadee17ec83029337781bd.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
66986de0ccfadee17ec83029337781bd.exe
Resource
win10v2004-20231215-en
General
-
Target
66986de0ccfadee17ec83029337781bd
-
Size
1.5MB
-
MD5
66986de0ccfadee17ec83029337781bd
-
SHA1
f51d1b3daa22baf9cca72444373efb370afa7309
-
SHA256
33f698f491b7713d55c33f05ba11da82fc11266855d923b55e2cd84f69c67dee
-
SHA512
647aa5c69cc8387550d19f8a03d019cd764a3166f874a362631980d91065accd45fb0839f9e5ce03724c80c710445d4dee7c417cc4ed26676e4b02cbf799f2fb
-
SSDEEP
24576:h6gNHJ9ywd/B/9oHc5K5Q1B+7qhIYgZ67+u33jG6Ngiupb2h5/dXyAFNsSc2Gn:h6Zwd/XoHck5Q187s0HWLvkKLHDsSc2O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66986de0ccfadee17ec83029337781bd
Files
-
66986de0ccfadee17ec83029337781bd.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 483KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dcogkhas Size: 796KB - Virtual size: 800KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cbuaceya Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE