Static task
static1
Behavioral task
behavioral1
Sample
866b26fbc9d0836827af2658c08bc01b966d2f0596127e636f90573e0a187ced.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
866b26fbc9d0836827af2658c08bc01b966d2f0596127e636f90573e0a187ced.exe
Resource
win10v2004-20240226-en
General
-
Target
866b26fbc9d0836827af2658c08bc01b966d2f0596127e636f90573e0a187ced
-
Size
14KB
-
MD5
d047c709227f70d79cf7cec46d47a3cb
-
SHA1
114b97f7475c552b61388f186f72a85649263f9e
-
SHA256
866b26fbc9d0836827af2658c08bc01b966d2f0596127e636f90573e0a187ced
-
SHA512
43bfcc96a13449ab5f74ebfa41a08ad1a179275966f2c0dcd42fd29bdcd4b81b3ab1c6ef0641720c7acbd4acdeb9d69fa1d1b4fe444305101500b2952557fa38
-
SSDEEP
384:wjJOOMG4U1cW0iSEBx6GnPJ7syM2lULltDE045Hz:gqy6imGnxbM2l6dA1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 866b26fbc9d0836827af2658c08bc01b966d2f0596127e636f90573e0a187ced
Files
-
866b26fbc9d0836827af2658c08bc01b966d2f0596127e636f90573e0a187ced.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ