Static task
static1
Behavioral task
behavioral1
Sample
d66ba5b3d4d9c5049a4160595b6cfad0bd916ab1f32977daba0ae508b2d7ade0.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d66ba5b3d4d9c5049a4160595b6cfad0bd916ab1f32977daba0ae508b2d7ade0.exe
Resource
win10v2004-20240412-en
General
-
Target
d66ba5b3d4d9c5049a4160595b6cfad0bd916ab1f32977daba0ae508b2d7ade0
-
Size
5.6MB
-
MD5
66764cf58627f24bd0b964b1e0404a40
-
SHA1
d71e5d005e55a8070497d283dcd568f9ca01584c
-
SHA256
d66ba5b3d4d9c5049a4160595b6cfad0bd916ab1f32977daba0ae508b2d7ade0
-
SHA512
228e1128066abf5935caf42bc0d58235095e5b00b190095428c1f3ba7b852eb049e79e189a2e5dd53404d2a7c270f7232c2d5c3a2e6cc9d8783c78c886f978cf
-
SSDEEP
98304:JuLgywiNHBeSLxYK/bxE3q/BlZkWMGPQflVJ/EK1sLyzs2T2Q1mOjq4/:g7wqheSVYK/bua/BlWWnuVhsus8nm+qi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d66ba5b3d4d9c5049a4160595b6cfad0bd916ab1f32977daba0ae508b2d7ade0
Files
-
d66ba5b3d4d9c5049a4160595b6cfad0bd916ab1f32977daba0ae508b2d7ade0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.Upack Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE