Static task
static1
Behavioral task
behavioral1
Sample
66bfdd8adbc3b5755eda3f33935670b8d65f830f689a2dc224ec4c6bd6687a4f.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
66bfdd8adbc3b5755eda3f33935670b8d65f830f689a2dc224ec4c6bd6687a4f.exe
Resource
win10v2004-20240709-en
General
-
Target
66bfdd8adbc3b5755eda3f33935670b8d65f830f689a2dc224ec4c6bd6687a4f
-
Size
63KB
-
MD5
1082e24c931d18e9eed56d56cf86d5e0
-
SHA1
f7d953e808fba72bd545d37c763232a846ba4b1f
-
SHA256
66bfdd8adbc3b5755eda3f33935670b8d65f830f689a2dc224ec4c6bd6687a4f
-
SHA512
1c4ef9390409ad78823aab76c1ca559a3fb56404dd546a21d8d68ea7ee212181fa6f413e7fb68b738aff6538e224212eb5df1d20ab3496f7098a12ae092e2d18
-
SSDEEP
1536:fizefvSjBkuz4q84ohPas62MAFvteg+MJo2JWWc:fimUB/UJhPaAGrb2Yp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66bfdd8adbc3b5755eda3f33935670b8d65f830f689a2dc224ec4c6bd6687a4f
Files
-
66bfdd8adbc3b5755eda3f33935670b8d65f830f689a2dc224ec4c6bd6687a4f.exe windows:4 windows x86 arch:x86
8887bf6d2c9b407267f77137ae647e80
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetDllDirectoryW
BaseCheckAppcompatCacheEx
EscapeCommFunction
VirtualAllocExNuma
ParseApplicationUserModelId
SleepEx
WerRegisterAppLocalDump
DosPathToSessionPathA
_lread
CloseThreadpoolCleanupGroupMembers
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE