Static task
static1
Behavioral task
behavioral1
Sample
65082a32056ed3c5f8fe68a266a157b4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
65082a32056ed3c5f8fe68a266a157b4.exe
Resource
win10v2004-20231215-en
General
-
Target
65082a32056ed3c5f8fe68a266a157b4
-
Size
686KB
-
MD5
65082a32056ed3c5f8fe68a266a157b4
-
SHA1
35fe407546a55d3a61ce4b8a67c579aa44a8ee55
-
SHA256
305f37df83ed5b884e86e86bbc895b8f4ddad6421fe79dac339536f0dbace886
-
SHA512
b8e6076d123d1e577e031de370aaa39171ea88c57671335b94d2e36c0df10179815a34b88af48e00df15ac7eb8112bd96768708f50e1cba561a4b801d95302f2
-
SSDEEP
12288:/HK4e77vEtZalCYw0iNADDF3Z4mxxarVSlVCBiL0bcV5F:/HY778tZbDNAvQmXaogiga5F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65082a32056ed3c5f8fe68a266a157b4
Files
-
65082a32056ed3c5f8fe68a266a157b4.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 370KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE