Static task
static1
Behavioral task
behavioral1
Sample
65b8631879b13c92951393c27fc01640.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
65b8631879b13c92951393c27fc01640.exe
Resource
win10v2004-20231215-en
General
-
Target
65b8631879b13c92951393c27fc01640
-
Size
97KB
-
MD5
65b8631879b13c92951393c27fc01640
-
SHA1
37ba0f2b43992aab9f8156fa907a5e6349584a5a
-
SHA256
e952422d45925a4deed7866430111fd2e9a6508c13ca3889e085b9431b79da8a
-
SHA512
02eada73d65ecffdeb7ef1ea7ce9dd1b6e9a5baf87ba8c0ef94012e7d063b47fc293485f53e31da6e33c9fa0fcc27bbadb493c8e1293d0605bfa8207df6c511b
-
SSDEEP
3072:L1QCJpngzkPxZWr6XPGsf1q+g0tMinc9gzgJjLWIopruA:pL5xZWePGsmgM3ZjLWIopruA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65b8631879b13c92951393c27fc01640
Files
-
65b8631879b13c92951393c27fc01640.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 999KB - Virtual size: 999KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ