Static task
static1
Behavioral task
behavioral1
Sample
c0663f9620803e1ce4239830d71479b94089286b05bd1e29dff0d46fc765a1b6.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c0663f9620803e1ce4239830d71479b94089286b05bd1e29dff0d46fc765a1b6.exe
Resource
win10v2004-20240802-en
General
-
Target
c0663f9620803e1ce4239830d71479b94089286b05bd1e29dff0d46fc765a1b6
-
Size
14.6MB
-
MD5
3c5e0198cbc33c42a173cb3ba3111f93
-
SHA1
90a6fcaebaf2b421c736f180aa0c8439c12ddc10
-
SHA256
c0663f9620803e1ce4239830d71479b94089286b05bd1e29dff0d46fc765a1b6
-
SHA512
8adceb2b93decf9b8f08660cd6f48b42fa12d740d1c6e1ef2295ab9abca5e0bbb671e555aa18487200b644482d99e81f2bf4f234a436d1c94c19ce155232671c
-
SSDEEP
196608:O/AJuMr1pbJJV9T4dO+cyw31WTJOSAnF:AAVr1pdABwFWTJOSoF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0663f9620803e1ce4239830d71479b94089286b05bd1e29dff0d46fc765a1b6
Files
-
c0663f9620803e1ce4239830d71479b94089286b05bd1e29dff0d46fc765a1b6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 6.7MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 172KB - Virtual size: 774KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ