Static task
static1
Behavioral task
behavioral1
Sample
65d6efab7bd40df703e949aefa56d92c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
65d6efab7bd40df703e949aefa56d92c.exe
Resource
win10v2004-20231215-en
General
-
Target
65d6efab7bd40df703e949aefa56d92c
-
Size
113KB
-
MD5
65d6efab7bd40df703e949aefa56d92c
-
SHA1
ac6030e475e4f18e34bcd4c12300141b6eabc7a4
-
SHA256
e8f3ddc04da3a780e2ee7c9f5bbabd8319f94b707b76d91fc97656243ec919b0
-
SHA512
26016b8bbf72b39581f194eedb7b55e96afe84f1efe8ac625eb3a0873a8e7fbada772f977ff6660bc9b17568819d95b6c554eb0ae3fcb3d6151042a0d70ce051
-
SSDEEP
3072:nOwHETxGO7xvopaPsBMWSQLN8BuJHfY395e4QMo3:n3HEUOtopcaMfWNNHf6je1P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65d6efab7bd40df703e949aefa56d92c
Files
-
65d6efab7bd40df703e949aefa56d92c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
mrysep Size: 1KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
twsyod Size: - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ