Static task
static1
Behavioral task
behavioral1
Sample
165f3b07c795ce30967c5d6259e1bf53.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
165f3b07c795ce30967c5d6259e1bf53.exe
Resource
win10v2004-20231215-en
General
-
Target
165f3b07c795ce30967c5d6259e1bf53
-
Size
958KB
-
MD5
165f3b07c795ce30967c5d6259e1bf53
-
SHA1
743920a38ba1ac56c4a191415fa92cd6a834f61e
-
SHA256
aaa53aeaffc36571a0e1d5bde8d17adb65313e7449368cb9c9d098fc22fe09ac
-
SHA512
10c420ea62423e0cca4c0aeda2329224547e6b57ada35921f9dcb651ca920365e2c4c74b760ab63a36199d69f05db6efe1480ac42931c477a75156e66bc4e43b
-
SSDEEP
12288:jbZi970SJsTEDcQ8/aG6RJG5SJ/WxDlma2SvGwetqRxQinN53GqRKfMwbH:jbZFQDcQ8yGIOSMJwK1KqXr3G0FwT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 165f3b07c795ce30967c5d6259e1bf53
Files
-
165f3b07c795ce30967c5d6259e1bf53.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 952KB - Virtual size: 952KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ