Static task
static1
Behavioral task
behavioral1
Sample
65a4f456b4e6acf364b0278db5d571a2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
65a4f456b4e6acf364b0278db5d571a2.exe
Resource
win10v2004-20231215-en
General
-
Target
65a4f456b4e6acf364b0278db5d571a2
-
Size
118KB
-
MD5
65a4f456b4e6acf364b0278db5d571a2
-
SHA1
38d76835fb41c577b04df552cfe94614cbb9fdc3
-
SHA256
b44d0374b8bb338d5b1255235d86d2ab38e14e41efc99fd064c8e3ca5308545b
-
SHA512
3057a748b3ffb5da76ea37ae14a0d9554a2bd191a987cede7d48d9693f1396c2e7598e3827975f60c9ed20f43ba5d93224f26046f0d1b347abd73c5cb6128be4
-
SSDEEP
1536:0TPrO4Yn1lRUazu09i9u0b0YsCUyKekTH6n7lEiUSamDKrxZXlbgDqD5MyUJVY4l:0/E8aS09iDsCd72xPPXyDqDyjJs63IvM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65a4f456b4e6acf364b0278db5d571a2
Files
-
65a4f456b4e6acf364b0278db5d571a2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 192KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 115KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE