Static task
static1
Behavioral task
behavioral1
Sample
965a1a50e96049d00778af494680a237.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
965a1a50e96049d00778af494680a237.exe
Resource
win10v2004-20231215-en
General
-
Target
965a1a50e96049d00778af494680a237
-
Size
184KB
-
MD5
965a1a50e96049d00778af494680a237
-
SHA1
1a16a34ba8bc6423990240ccb932f3b197db64f8
-
SHA256
c64ba96edbaaaed6f32c6e99c3d88b0624945b4b3dbe62321be78a5bc98f8938
-
SHA512
76f13fe4a43d5ffaefede46a8bb144c0021ac37351aeb2199615cefd87c1d606db3d6d14553b8105fb2fc65ff87b20d8492a397b70b19888ee93b6b4c1fa69bd
-
SSDEEP
3072:QAhaomxH02qTVYjgqUYWLjBLoZR6zw6iXEEx9zPppslPvpFW:QAgoxpTVpq5WLj6p5XslPvpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 965a1a50e96049d00778af494680a237
Files
-
965a1a50e96049d00778af494680a237.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.d�ta Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ