Static task
static1
Behavioral task
behavioral1
Sample
2765efcabe94107036d629a132a4dc95.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2765efcabe94107036d629a132a4dc95.exe
Resource
win10v2004-20231215-en
General
-
Target
2765efcabe94107036d629a132a4dc95
-
Size
3.8MB
-
MD5
2765efcabe94107036d629a132a4dc95
-
SHA1
3d1d66017ba0af27f5c77637d629ebfbc29af2fb
-
SHA256
463999ddfe8cf7a43fb109d1b181e11802d4b4f3f5acf168b219374272045bd1
-
SHA512
b05508765e708e8549c738452ac9f4bae330e1ef4bdee36e07494eaf3788e1dda9b1bec0f360c9905dc775e7e133ee242b38e843eaa6bb1335cc9d0b18bf38ab
-
SSDEEP
98304:vqfr8qjV5REqFsCwv6mfin14F4AMbogmZMznOWE1tDxxQ:igqjvwibF92xa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2765efcabe94107036d629a132a4dc95
Files
-
2765efcabe94107036d629a132a4dc95.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 700KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 135KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 271KB - Virtual size: 271KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ