Static task
static1
Behavioral task
behavioral1
Sample
965f6d08205ed1e55a98fce4eb66f1ef08c1b37d73b9fca66787069c2f3f3364.exe
Resource
win10v2004-20231130-en
General
-
Target
965f6d08205ed1e55a98fce4eb66f1ef08c1b37d73b9fca66787069c2f3f3364
-
Size
7.7MB
-
MD5
fd01221b6c65a5e632601501be1fec24
-
SHA1
bb34ad2fbb2355b695bf7017fa1edab52cc6ed2f
-
SHA256
965f6d08205ed1e55a98fce4eb66f1ef08c1b37d73b9fca66787069c2f3f3364
-
SHA512
0c5f2da1b879e61e9631406f213805d9206c9b1dd273850fbe3e89b3af3ed520af00c78d36e818092ffd8c2c17293ed5c4c0e634fd27d32cde80e0f320399f18
-
SSDEEP
196608:zxm5+owJB5yCqVoeL8gqA1u8QWGVq/iUYJ0Mnizj:sw7rq1L58WGVqaDizj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 965f6d08205ed1e55a98fce4eb66f1ef08c1b37d73b9fca66787069c2f3f3364
Files
-
965f6d08205ed1e55a98fce4eb66f1ef08c1b37d73b9fca66787069c2f3f3364.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ