Static task
static1
Behavioral task
behavioral1
Sample
65193bdd2a803e8117287b2654a09791.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
65193bdd2a803e8117287b2654a09791.exe
Resource
win10v2004-20231215-en
General
-
Target
65193bdd2a803e8117287b2654a09791
-
Size
105KB
-
MD5
65193bdd2a803e8117287b2654a09791
-
SHA1
9ef080b471b27255f5f836b9ad569d7b3d5f09c8
-
SHA256
a88105df218c30b13efb3d7c3dff0a7bdfcabf67dd344ad655b8129f36f6cac3
-
SHA512
6142e00efb9bc29a37055f94c67f50a22989bb20c92f8c313aef5849c5af92f964b12b2cfbfbb98a4b60b10c7c5a3ef2a04a94edb87ac1917b0ceb652af5ddac
-
SSDEEP
3072:wikM3EKbajW87o1Fba6zG/c8kU4i7nYgiy:uM3TwW8MOUQNrYgiy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65193bdd2a803e8117287b2654a09791
Files
-
65193bdd2a803e8117287b2654a09791.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
9 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ib4py Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
r58 Size: 821B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE