Static task
static1
Behavioral task
behavioral1
Sample
67fdc020fa766b0f2967e24c16f88406.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
67fdc020fa766b0f2967e24c16f88406.exe
Resource
win10v2004-20231215-en
General
-
Target
67fdc020fa766b0f2967e24c16f88406
-
Size
3.2MB
-
MD5
67fdc020fa766b0f2967e24c16f88406
-
SHA1
5e9e6bc8024c1c3b10bdc0982366c26d213eded6
-
SHA256
71d192311813fcb8ef2c9dce610d8ac81a74b59d7e1cd05dd350c4a40718867e
-
SHA512
5273bc7e8b047210b37e5bf172d276ec2049044ccb64be1edada9ba07db072b141d62b766c0ae4153f6c5c42dca7acfec5cfc1c304e2a3e4667efbac515774ad
-
SSDEEP
49152:W2a5JJ8y5/v9MRihKPgssSt2gPakOElMaFLkC:Y8q9Rhv7Sthak7T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67fdc020fa766b0f2967e24c16f88406
Files
-
67fdc020fa766b0f2967e24c16f88406.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ