Static task
static1
Behavioral task
behavioral1
Sample
02965b74dd6c2b457aee765e9bdf032b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
02965b74dd6c2b457aee765e9bdf032b.exe
Resource
win10v2004-20231215-en
General
-
Target
02965b74dd6c2b457aee765e9bdf032b
-
Size
757KB
-
MD5
02965b74dd6c2b457aee765e9bdf032b
-
SHA1
ebfd4480b6bbead8abbc1d52ee4ed66976da757e
-
SHA256
6df2dbd29508c4ba6427683af38b1db461d6f645258dc3c737c7d196691812c5
-
SHA512
6e6f151420f417e8703e91c9d1a8475dd07d8e98255dd5d3d9558e1ed6f969cfc953d9981257888f82438c43f6ca6f33ddee1eaad45c04af3b194b1cbdcdbc74
-
SSDEEP
12288:yJOq88okny7j1dQryuIX14LsPvy+cY7xfSQ6WECyhmbP:yJx8X7jv7TqLsCu5cWEthmbP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02965b74dd6c2b457aee765e9bdf032b
Files
-
02965b74dd6c2b457aee765e9bdf032b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 652KB - Virtual size: 652KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ