Static task
static1
Behavioral task
behavioral1
Sample
66e4c27aa4e1374ce9d82ebfad2189cde116503eb579bfea0662094588a40f45.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
66e4c27aa4e1374ce9d82ebfad2189cde116503eb579bfea0662094588a40f45.exe
Resource
win10v2004-20240802-en
General
-
Target
66e4c27aa4e1374ce9d82ebfad2189cde116503eb579bfea0662094588a40f45
-
Size
89KB
-
MD5
adb0c3a94e571a6989ae40c1ef80a907
-
SHA1
d2145588b99e4f0e7885400bede15f685504bd78
-
SHA256
66e4c27aa4e1374ce9d82ebfad2189cde116503eb579bfea0662094588a40f45
-
SHA512
d77d38b8f763b4bd91e8b31c88818f9b7b8eb10e9f41a7ffe4d6a128db89286bc0871ae2bc6e0e94fabbf57a34b8cc547cddd86404346e952857e67d61e62f13
-
SSDEEP
1536:vVMTn34O2MUfrJuBWi1SURVr2CTfQckSGS6oHIRAkT:to3wM7AiP5nTfzkfR7T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66e4c27aa4e1374ce9d82ebfad2189cde116503eb579bfea0662094588a40f45
Files
-
66e4c27aa4e1374ce9d82ebfad2189cde116503eb579bfea0662094588a40f45.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3.1MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 388KB - Virtual size: 388KB
IMAGE_SCN_MEM_READ