Static task
static1
Behavioral task
behavioral1
Sample
66159f77314dcd6e03d8bf7274ee92313ef42d5e8a40ab7fc26495dd871e7105.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
66159f77314dcd6e03d8bf7274ee92313ef42d5e8a40ab7fc26495dd871e7105.exe
Resource
win10v2004-20240226-en
General
-
Target
66159f77314dcd6e03d8bf7274ee92313ef42d5e8a40ab7fc26495dd871e7105.exe
-
Size
715KB
-
MD5
cd2c1efbea5d6b1cd4367c0de3b252b5
-
SHA1
5896bacd7f8b694c6e1d7ddffea12a60e179af3c
-
SHA256
66159f77314dcd6e03d8bf7274ee92313ef42d5e8a40ab7fc26495dd871e7105
-
SHA512
19d26411030de3fdd8ed708ee1191fc6932e12ed412a7d1f7c42de8080f6bca6dae5170c30f0eb81fa95e2aab11be03efc1eb2df45d91e916cffba8bd0b38473
-
SSDEEP
12288:R6FO1l1nQK9/jU5XeAtXCyoyWy/wf/df5EsOr3bpEJm5rf+rxVF/kfsA62QBW:d5/jUkEhoyM3fvOfCJcf+rksF2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66159f77314dcd6e03d8bf7274ee92313ef42d5e8a40ab7fc26495dd871e7105.exe
Files
-
66159f77314dcd6e03d8bf7274ee92313ef42d5e8a40ab7fc26495dd871e7105.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 703KB - Virtual size: 702KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ