Static task
static1
Behavioral task
behavioral1
Sample
65b7129810963c598af4c37bd3e4d132.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
65b7129810963c598af4c37bd3e4d132.exe
Resource
win10v2004-20231215-en
General
-
Target
65b7129810963c598af4c37bd3e4d132
-
Size
3.6MB
-
MD5
65b7129810963c598af4c37bd3e4d132
-
SHA1
26f3d3a5851e95296ccc561744310306a6383c63
-
SHA256
427cab59023d3bf05cb1bcca0e053b31c4238809dc54bee8c65644cd002afebc
-
SHA512
320f4f9a34ad2826d83260f296f63b8baeba29cd32042f1882f6a6637711bf38c27835ec0b27986bab9c0009e632236eaa4914dc8fa244216b64c7720c4eb772
-
SSDEEP
98304:iRS6nfSOQZOt+CW+7EELhF3gxpNOf2k2Y/A2/:ikj8NBFwxpNOuk27O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65b7129810963c598af4c37bd3e4d132
Files
-
65b7129810963c598af4c37bd3e4d132.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ