Static task
static1
Behavioral task
behavioral1
Sample
f65313c50714e9b0cca675b9d45e62b9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f65313c50714e9b0cca675b9d45e62b9.exe
Resource
win10v2004-20231222-en
General
-
Target
f65313c50714e9b0cca675b9d45e62b9
-
Size
1.2MB
-
MD5
f65313c50714e9b0cca675b9d45e62b9
-
SHA1
4e75618a05e31f7172ed02bcb3dc42da7dfe2fd6
-
SHA256
e050797369c0598f42e251ba6ab072d6fe2d27ac8047de58078d54d8e7205eca
-
SHA512
e4abeafa00d29b4179b6189fc0e102f377e0ecc29936b18ad8585902296e2cd668a12799a6a150da31002ff423c6a300eb3e1d9de39d61570b7bb11c1ca3a463
-
SSDEEP
3072:JPmRdcbBO0uum+tXL7Cx/DquF5idjO2Pudu:JencbBduSngeuFIdjO2Pu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f65313c50714e9b0cca675b9d45e62b9
Files
-
f65313c50714e9b0cca675b9d45e62b9.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 133KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jayp.q.v Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rs.cphu7 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ztjnlwrl Size: - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
e1mdq6hp Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
j0sqw173 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ