Static task
static1
Behavioral task
behavioral1
Sample
67693ed2eff8497942f7ac6e5a76019c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
67693ed2eff8497942f7ac6e5a76019c.exe
Resource
win10v2004-20231222-en
General
-
Target
67693ed2eff8497942f7ac6e5a76019c
-
Size
85KB
-
MD5
67693ed2eff8497942f7ac6e5a76019c
-
SHA1
54d3fb53006697ca9deb59ecf1fb5991113671b4
-
SHA256
d993433eb5b09f68498c65e8417082dd10acc546f8f5d2eb7c96694e7444550e
-
SHA512
827ee18f902d943d60ff15aa7a41d18eac88e53eb38c34b99253f68bdbc077bc105ddfc8907519b85af76e39f3515f73f66f38a21abc9e55f5bc57b77b709939
-
SSDEEP
1536:TjqjoQayK1hrXUkEXC9PVWkcHjK4f7Gb4GoRbAaqb7iAiFRJ4+F9FPma9:uoKKXX0CFVWLDpf7Gb4GoRbAaqHijRJZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67693ed2eff8497942f7ac6e5a76019c
Files
-
67693ed2eff8497942f7ac6e5a76019c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ