Static task
static1
Behavioral task
behavioral1
Sample
Malicious_521af788ac52e929bdd323fdba7baa68ba6edd6cb3527434c0ed3bd14f6690a1.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
Malicious_521af788ac52e929bdd323fdba7baa68ba6edd6cb3527434c0ed3bd14f6690a1.exe
Resource
win10v2004-20230621-en
General
-
Target
Malicious_521af788ac52e929bdd323fdba7baa68ba6edd6cb3527434c0ed3bd14f6690a1.exe
-
Size
56KB
-
MD5
ec844d37dbe6af2e6a838c01d162b1da
-
SHA1
6a768999fca56436726e76063bdf47bae1ccb761
-
SHA256
521af788ac52e929bdd323fdba7baa68ba6edd6cb3527434c0ed3bd14f6690a1
-
SHA512
a633b04d5072162c77ae90748209570ded57d37418fb92f7c1c3adc174d3016ae38e081e450f172fdcdab4a58972660a0bfa514ea76370893bb10fdd7a3beacc
-
SSDEEP
768:GkSpxDBALGLVZSkJjGErmLOnf0f+A1V86YTqZd9/u0LhdF93QU9SzcUsRW/eid8i:GdCc3HaiUVHYepnLhPL4cZQ/Vytml
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Malicious_521af788ac52e929bdd323fdba7baa68ba6edd6cb3527434c0ed3bd14f6690a1.exe
Files
-
Malicious_521af788ac52e929bdd323fdba7baa68ba6edd6cb3527434c0ed3bd14f6690a1.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 142KB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ