Static task
static1
Behavioral task
behavioral1
Sample
65f8c2da6926e5958c7368fb86923e85dc37be6df4822ff02c572683c499f43a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
65f8c2da6926e5958c7368fb86923e85dc37be6df4822ff02c572683c499f43a.exe
Resource
win10v2004-20250129-en
General
-
Target
65f8c2da6926e5958c7368fb86923e85dc37be6df4822ff02c572683c499f43a
-
Size
1.7MB
-
MD5
b7aec3e69bc8cc14651a6619fe7ad164
-
SHA1
811750d4e134c07b5416eefe76a760d9d93abfae
-
SHA256
65f8c2da6926e5958c7368fb86923e85dc37be6df4822ff02c572683c499f43a
-
SHA512
910444a06767fd67102d4d639f8fc247f99f449c1ae81c80ee4e14b0e715bc35c1a3f4e10ccff6d0ed15fc2e4753d140f3467aa0dadb3de8c87260735d5c0d8b
-
SSDEEP
49152:ZCzB2GYL7cdqlCHqK4PvnsmtVkCWBJiBiZ/q5J/:ZCzAG4cclCBWptVj5J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65f8c2da6926e5958c7368fb86923e85dc37be6df4822ff02c572683c499f43a
Files
-
65f8c2da6926e5958c7368fb86923e85dc37be6df4822ff02c572683c499f43a.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cybtslxb Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qprdljbe Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE