Static task
static1
General
-
Target
6565.exe
-
Size
396KB
-
MD5
35773634c4e4ba8bd361d75bb6dc7756
-
SHA1
a0fbb81907729b74e7259ec4cc6c40ec9ffa2ce9
-
SHA256
21bfd516e91991051751abc238f36db0138bfcfb08705cf406390997cf2961b2
-
SHA512
565912dfa9c2dc30b0f304731037bc518f1f29e118d9025fde145e802edeb1ad02ef5ef3f007866b137a619616edaf4e3014685f3f21625665d72c6cfa4efc23
-
SSDEEP
6144:vCs2yciJDbcEkVe6VlWT8b9+jk7hGpD83Hn8qb+BByvmpurw3A:vCs9eJPVle8fg0n/epPw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6565.exe
Files
-
6565.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 393KB - Virtual size: 392KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ