Static task
static1
Behavioral task
behavioral1
Sample
66654b7fee4c55c82ba5ea58e97c391cac51b5a37ade35581ce2701546e34827.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
66654b7fee4c55c82ba5ea58e97c391cac51b5a37ade35581ce2701546e34827.exe
Resource
win10v2004-20240508-en
General
-
Target
66654b7fee4c55c82ba5ea58e97c391cac51b5a37ade35581ce2701546e34827
-
Size
376KB
-
MD5
148dc9a374405b9895744abe7046d82f
-
SHA1
e5ffe76542e9b1a7886cbca46073c256360033bf
-
SHA256
66654b7fee4c55c82ba5ea58e97c391cac51b5a37ade35581ce2701546e34827
-
SHA512
a4dcb5f4727075b21a60cbe64e5da2df039b08c11f1b9d2532e7fdc6952f316de5a8ea0adfa236d0a7687b9ed13dd67285fab51e4fe58ec916a111a3eac41bc0
-
SSDEEP
6144:06dLyfg8AA62yKU0ImINn8fk9SwoFlhfEWonjwn198:06dL3BNnTkwoFlRgnjwn1u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66654b7fee4c55c82ba5ea58e97c391cac51b5a37ade35581ce2701546e34827
Files
-
66654b7fee4c55c82ba5ea58e97c391cac51b5a37ade35581ce2701546e34827.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 357KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ