Static task
static1
Behavioral task
behavioral1
Sample
506db26434dbb3b70d830090ee5b2edf569b12d420a11984ed59b7bfc41de3e8.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
506db26434dbb3b70d830090ee5b2edf569b12d420a11984ed59b7bfc41de3e8.exe
Resource
win10v2004-20230703-en
General
-
Target
506db26434dbb3b70d830090ee5b2edf569b12d420a11984ed59b7bfc41de3e8
-
Size
3.7MB
-
MD5
bfb5478e3e541631e7444e15e6a2ed4e
-
SHA1
46a4096a8d5da92ba7affce4e67c211d6a366b8c
-
SHA256
506db26434dbb3b70d830090ee5b2edf569b12d420a11984ed59b7bfc41de3e8
-
SHA512
6e5b07f61d01d1979a237784c5bad277e443dd22ccb35f7c3d083d99945e80cb93b40bccbc5bb655cdd151da6f869d28d74c0e5d822cffaced269d355c1e0cf8
-
SSDEEP
49152:CgDTur1OYAR4u1TijTuT0XDcc+D+FF/aQeGqOelXZUdKdlL+0p566l2:COqOYAR4TvXDcsFavOaXZ8Kbzp566l2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 506db26434dbb3b70d830090ee5b2edf569b12d420a11984ed59b7bfc41de3e8
Files
-
506db26434dbb3b70d830090ee5b2edf569b12d420a11984ed59b7bfc41de3e8.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 3.7MB - Virtual size: 8.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE