Static task
static1
Behavioral task
behavioral1
Sample
65ea8966f3f57ce00bac1457191e2f29.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
65ea8966f3f57ce00bac1457191e2f29.exe
Resource
win10v2004-20231222-en
General
-
Target
65ea8966f3f57ce00bac1457191e2f29
-
Size
95KB
-
MD5
65ea8966f3f57ce00bac1457191e2f29
-
SHA1
4e55550379f8b8f7bae7698fac011d7494b7cb2c
-
SHA256
e1f5f5b4088cf14363ed98937eb55bc89f5920c5fc4f6c53601e8cf7637b6639
-
SHA512
601c2a9ef45c857d1f2c3f4a895563593d02a1caefb6d1f6bf460760bdc1702bc98e332716ea6f4e922a41902f6a779b9bb9c45127cfc77ca717283aa375135a
-
SSDEEP
1536:Bkma00FPYCB/8NSF4JTZoCgWtaL5KHFs7ouTqGziildpkx1eQRo6oQruOkfctkUX:BraUCB/Sq4J/g4iwy7tTlGiWVnfqUi0d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65ea8966f3f57ce00bac1457191e2f29
Files
-
65ea8966f3f57ce00bac1457191e2f29.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.data Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 995KB - Virtual size: 995KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_rsc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ