Static task
static1
Behavioral task
behavioral1
Sample
565dc115127741ff9c45b9cfd5f5230c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
565dc115127741ff9c45b9cfd5f5230c.exe
Resource
win10v2004-20231222-en
General
-
Target
565dc115127741ff9c45b9cfd5f5230c
-
Size
108KB
-
MD5
565dc115127741ff9c45b9cfd5f5230c
-
SHA1
da96fce0a4f068453a1670a7a133e87690be0d2e
-
SHA256
e685d8e2c92867131c3dd9f2f55b2e6af9d9313947da4500235c3b2e8e5330c6
-
SHA512
b86b349858868a1dd784726a69711d9889e9d638da1b985f5b20c147c7cc2e2bc6d61854debee294fd554fa0d7d725196bb105d144e235d4872774ab45557ef3
-
SSDEEP
1536:NchwBT2pZY0lB6v5yG1lrCYZNmVFK9pNJ7okGk:NPBTEB05VlPZFjJ7+k
Malware Config
Signatures
-
Nirsoft 1 IoCs
resource yara_rule sample Nirsoft -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 565dc115127741ff9c45b9cfd5f5230c
Files
-
565dc115127741ff9c45b9cfd5f5230c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ