Static task
static1
Behavioral task
behavioral1
Sample
65d48b2e798902bc02e0b9bbf3821152.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
65d48b2e798902bc02e0b9bbf3821152.exe
Resource
win10v2004-20231215-en
General
-
Target
65d48b2e798902bc02e0b9bbf3821152
-
Size
100KB
-
MD5
65d48b2e798902bc02e0b9bbf3821152
-
SHA1
75751d2f751980871771ac2951b4634a33cd1464
-
SHA256
9485100f1f707d6d7ef565dd94ee801df4bf7c34d53d13d703b0055b4c3c5692
-
SHA512
ad505f8acb2c77584d5ed648da8a930360388da117afe5f3b6a6fd54c02cb632966f1debcc8f41c0db41eb87a59ee34dc66c5afcce4ecbfde3bcb98c22dabe25
-
SSDEEP
1536:FhqlUmQxF2zNUquVx0GQrNy31lNaQnyeb8x6i:CYEi6heb46i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65d48b2e798902bc02e0b9bbf3821152
Files
-
65d48b2e798902bc02e0b9bbf3821152.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.RIF1 Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF2 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RIF Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE