Static task
static1
Behavioral task
behavioral1
Sample
65b15514d7792698b83f6ca40eefdc081a826b1768dae090462401a198c346c2.exe
Resource
win10v2004-20240226-en
General
-
Target
65b15514d7792698b83f6ca40eefdc081a826b1768dae090462401a198c346c2
-
Size
1.8MB
-
MD5
8b317caf8419cadcb372ec12da951240
-
SHA1
805510fa85888244a867f30784f4895e9a25b71c
-
SHA256
65b15514d7792698b83f6ca40eefdc081a826b1768dae090462401a198c346c2
-
SHA512
0c8c443a0a694a981c162d346fe6d897e1df01978abd703cc13bdea2e5215be449890c953e7e33258b267015173b03490133abbd4c6e28773bf858a68e3527d4
-
SSDEEP
49152:rcbiY+81VOjkfa6ZyVojRF+CDX+0Z6ZE9:QZT1VOI5U+jDj7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65b15514d7792698b83f6ca40eefdc081a826b1768dae090462401a198c346c2
Files
-
65b15514d7792698b83f6ca40eefdc081a826b1768dae090462401a198c346c2.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
plpwyvgz Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hrutbsga Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE