Static task
static1
Behavioral task
behavioral1
Sample
65ac3e80b5d7499316fa680cb138aa9e4038f0b107aec3371cf7d7c5c24fd6f0.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
65ac3e80b5d7499316fa680cb138aa9e4038f0b107aec3371cf7d7c5c24fd6f0.exe
Resource
win10v2004-20230220-en
General
-
Target
65ac3e80b5d7499316fa680cb138aa9e4038f0b107aec3371cf7d7c5c24fd6f0
-
Size
683KB
-
MD5
1c3b2b03d64943a5d15ca78b01045208
-
SHA1
cd7ac7fd54568c97f8c2e79c0f11d5895e4cc009
-
SHA256
65ac3e80b5d7499316fa680cb138aa9e4038f0b107aec3371cf7d7c5c24fd6f0
-
SHA512
d9a2eaf09e04827be5765ff4c689c7ec14ce360749eb412838ed41008c6696857c8232d1cc5602ebfbbbfb19faf4a19536ac62803c0cbafea174b026665cd9b0
-
SSDEEP
12288:Y0M3Cwhh2Y4YY3PBeVBaOH1DZ5HSHeCd029n0Ha6JpMUqeh2ihzeO0xUtjNEMehb:YH3Cwhh23PBeV7gHHdL9n56Jpzqk2ihc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65ac3e80b5d7499316fa680cb138aa9e4038f0b107aec3371cf7d7c5c24fd6f0
Files
-
65ac3e80b5d7499316fa680cb138aa9e4038f0b107aec3371cf7d7c5c24fd6f0.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 681KB - Virtual size: 680KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ