Static task
static1
Behavioral task
behavioral1
Sample
667baf5881d3209b2db6d1563e07a02ca925e66b03bfef9c8c03e716537b04cd.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
667baf5881d3209b2db6d1563e07a02ca925e66b03bfef9c8c03e716537b04cd.exe
Resource
win10v2004-20240802-en
General
-
Target
667baf5881d3209b2db6d1563e07a02ca925e66b03bfef9c8c03e716537b04cd
-
Size
472KB
-
MD5
e58a72bbe0fe4673d9bd944b9ff707de
-
SHA1
6a354e03a926cda52bb426af128a6a292adaeee5
-
SHA256
667baf5881d3209b2db6d1563e07a02ca925e66b03bfef9c8c03e716537b04cd
-
SHA512
88030bd21616fca115e3937e774e454d4b18e06c612eb065c90ba1d9bc537645f94262a0f1e0dd4b228df33aa39e24ce62c3b2611591ed65856ee5a7b2e05e4d
-
SSDEEP
6144:kMB9aeNnZ6z4ax75huD1RlhRMUgjYv7VzNgHjBASdOcw:f/aww4I03uqR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 667baf5881d3209b2db6d1563e07a02ca925e66b03bfef9c8c03e716537b04cd
Files
-
667baf5881d3209b2db6d1563e07a02ca925e66b03bfef9c8c03e716537b04cd.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 662KB - Virtual size: 661KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 28KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didata Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 113B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 93B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ