Static task
static1
Behavioral task
behavioral1
Sample
065efd39d72a94d947af298d9a4f6c5fb364f6b3eb3a41a96f877b3f8cc91152.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
065efd39d72a94d947af298d9a4f6c5fb364f6b3eb3a41a96f877b3f8cc91152.exe
Resource
win10v2004-20240226-en
General
-
Target
065efd39d72a94d947af298d9a4f6c5fb364f6b3eb3a41a96f877b3f8cc91152
-
Size
130KB
-
MD5
eaf0cb41b1edf11e7cae001c1e1d81d4
-
SHA1
46e387caa54ee29d08d516f889ca04bf89027e1d
-
SHA256
065efd39d72a94d947af298d9a4f6c5fb364f6b3eb3a41a96f877b3f8cc91152
-
SHA512
c7e0c9ad827496862a504761d0eaefffe36daaf2dafa2ba91651ca6e0758a87a6c26ef84ed1a081941c86c268eeab52eb36272be388941bc3e4b58c8d6431361
-
SSDEEP
3072:lO55k/y5dAj+BMTYlgEQnB+Y+pek7+3O6FZ6NthnF:lO5n5d56TYZQnB+DpekyL6n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 065efd39d72a94d947af298d9a4f6c5fb364f6b3eb3a41a96f877b3f8cc91152
Files
-
065efd39d72a94d947af298d9a4f6c5fb364f6b3eb3a41a96f877b3f8cc91152.exe windows:5 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ