Static task
static1
Behavioral task
behavioral1
Sample
65fd13f3e0d62ea19cb77dedb17185e9eec72d1d157500026a373b69f27e982d.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
65fd13f3e0d62ea19cb77dedb17185e9eec72d1d157500026a373b69f27e982d.exe
Resource
win10v2004-20231023-en
General
-
Target
65fd13f3e0d62ea19cb77dedb17185e9eec72d1d157500026a373b69f27e982d
-
Size
1017KB
-
MD5
6778e045e796ea364bf82fc486396f01
-
SHA1
f2dc4d06c82d76cb4dc753c1b7e6cae763d561c4
-
SHA256
65fd13f3e0d62ea19cb77dedb17185e9eec72d1d157500026a373b69f27e982d
-
SHA512
5ff9c0c3871e1d8fde414e736a115bdd44fe22a09638d406028dbc81c3a38b892e99cf6dd71e8541fb8af288300e657f1469d366100b627386a2911fab435b50
-
SSDEEP
24576:2Xe7msyIRuhqAUzVHsnJ+bLU2gZ2bzE6c2YIEBs7plWGbVkkebf10xb:2O7mIuUAU2nEkSEB8WGbWkwNu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65fd13f3e0d62ea19cb77dedb17185e9eec72d1d157500026a373b69f27e982d
Files
-
65fd13f3e0d62ea19cb77dedb17185e9eec72d1d157500026a373b69f27e982d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 997KB - Virtual size: 996KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ