Static task
static1
Behavioral task
behavioral1
Sample
65ab44302e0c2b0369ec69d57b972a38241cbdf87aa3f9ed9d3b60177b6d81bd.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
65ab44302e0c2b0369ec69d57b972a38241cbdf87aa3f9ed9d3b60177b6d81bd.exe
Resource
win10v2004-20230915-en
General
-
Target
65ab44302e0c2b0369ec69d57b972a38241cbdf87aa3f9ed9d3b60177b6d81bd
-
Size
2.9MB
-
MD5
ca56542c8195b0530da50ef1749a6da9
-
SHA1
5d7e0f9d9d9a8a2fb595362d773267eff5ac6b14
-
SHA256
65ab44302e0c2b0369ec69d57b972a38241cbdf87aa3f9ed9d3b60177b6d81bd
-
SHA512
6c192d361a5e0ceb54ec098b030bd1e7501e162cafa30500688fc6a4ace35fe9a0666ab68a997c2de58d78397de92dde958f57c9f50e71a33956265bf03d6c0a
-
SSDEEP
49152:/S93rwHeabSvGZDfxQOunFsZrsBhMmBqKXHB0ZYxsV9yLzIKnGzsVAwJ8m6ZkrmS:ahMq0CaK1GzsHxDyUQm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65ab44302e0c2b0369ec69d57b972a38241cbdf87aa3f9ed9d3b60177b6d81bd
Files
-
65ab44302e0c2b0369ec69d57b972a38241cbdf87aa3f9ed9d3b60177b6d81bd.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 852KB
IMAGE_SCN_MEM_READ
VProtect Size: 624KB - Virtual size: 624KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.2MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 100KB - Virtual size: 100KB
IMAGE_SCN_MEM_READ