Static task
static1
Behavioral task
behavioral1
Sample
66f8c75f2a4653660ca66b8fd1103e53.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
66f8c75f2a4653660ca66b8fd1103e53.exe
Resource
win10v2004-20231215-en
General
-
Target
66f8c75f2a4653660ca66b8fd1103e53
-
Size
266KB
-
MD5
66f8c75f2a4653660ca66b8fd1103e53
-
SHA1
8f4524a13d3482112980ab9a08ce8ff5c8956bea
-
SHA256
7987e207146067540625e534d9cad4501a137eb2d22c160d9a2f2a0a91ff5b51
-
SHA512
3b1deb5a26ace3e684a73d9e5873ca7a4e86460e2f826464252c998eb816a70bf39a986d2ee7d46ca915694dccf461488c1585da4c004344ebaee497e88b50ae
-
SSDEEP
6144:HbjdN/9sRIo3rkTdjBB++5WA1Jck0KREcr5:7Jr4Ioby5+E1J5zREM5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66f8c75f2a4653660ca66b8fd1103e53
Files
-
66f8c75f2a4653660ca66b8fd1103e53.exe windows:4 windows x86 arch:x86
a54078032e46218464f2dfcb07a6e4f8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
FindFirstFileW
CopyFileW
EnumDateFormatsA
FindNextFileW
SetFileAttributesW
MoveFileW
FindClose
SetLastError
OpenProcess
UnregisterWaitEx
RegisterWaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
LoadLibraryExW
FormatMessageW
GetTickCount
CreateEventW
CreateThread
GetCurrentThreadId
OutputDebugStringA
GetCurrentProcessId
ResetEvent
SetEvent
GetFileAttributesExW
ReleaseMutex
WaitForMultipleObjects
CreateMutexW
CloseHandle
WaitForSingleObject
Sleep
LoadLibraryW
GetProcAddress
FreeLibrary
LocalAlloc
LocalFree
GetLastError
InterlockedDecrement
InterlockedIncrement
InterlockedExchange
oleaut32
SafeArraySetRecordInfo
SafeArrayCreateEx
VarDateFromI8
SafeArrayGetRecordInfo
SafeArraySetIID
SetErrorInfo
SysAllocString
SysAllocStringLen
msvfw32
ICInfo
Sections
.text Size: 165KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 270B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ