Static task
static1
Behavioral task
behavioral1
Sample
966bafaf083854906dd2014c5e65810f21a708c0dca2e6565f62bac7cf9f3f89.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
966bafaf083854906dd2014c5e65810f21a708c0dca2e6565f62bac7cf9f3f89.exe
Resource
win10v2004-20240226-en
General
-
Target
966bafaf083854906dd2014c5e65810f21a708c0dca2e6565f62bac7cf9f3f89
-
Size
65KB
-
MD5
86f1d675ede4e375646175a18309acf6
-
SHA1
899272d219a781e19b234f480a07f13a949c99f6
-
SHA256
966bafaf083854906dd2014c5e65810f21a708c0dca2e6565f62bac7cf9f3f89
-
SHA512
6eae7b1af1c213990157d0dc62b0bc97453aa4d26d411bb8b18843948cf4da31e06c9bfc521d5f7133e52991993462738e34ae93b8f1f2576445c12b899c2a7f
-
SSDEEP
768:ArOb1QF5kMtFC9LuryNzZHvAe5d/LfWOf01+tLNQGVAbOuf19jbEpDWIajDsXPhK:NB+FC9RntfWeoGiPyCHjKDjfQQQtUe39
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 966bafaf083854906dd2014c5e65810f21a708c0dca2e6565f62bac7cf9f3f89
Files
-
966bafaf083854906dd2014c5e65810f21a708c0dca2e6565f62bac7cf9f3f89.exe windows:1 windows x86 arch:x86
17a4bd9c95f2898add97f309fc6f9bcd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
Sections
.bss Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NewSec Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE