Static task
static1
Behavioral task
behavioral1
Sample
65accf92f3536a3e2c9a3eec239231ec.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
65accf92f3536a3e2c9a3eec239231ec.exe
Resource
win10v2004-20231222-en
General
-
Target
65accf92f3536a3e2c9a3eec239231ec
-
Size
61KB
-
MD5
65accf92f3536a3e2c9a3eec239231ec
-
SHA1
942d64612a8edefa6a2a4d420ccf7569aceb6744
-
SHA256
4adfef8c94c94836c51c1b9ba8722a8d13abad60875823c63a0ab37dfbb79718
-
SHA512
61b6105f5086a160128cbed3211c5d42ee74ba7db6b2f934c6128b853ceaabf5b0afab3755351418d3f81b26e13306b9341f2984cace0c0c4b6c6fc612391367
-
SSDEEP
1536:CVrW2A1DZw38CInH6yowtaf0Bgcg0lU22222222p:uW2Ajw38CvyowtOoNg0lq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65accf92f3536a3e2c9a3eec239231ec
Files
-
65accf92f3536a3e2c9a3eec239231ec.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
Size: 13KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE