Static task
static1
Behavioral task
behavioral1
Sample
558899faf39d65116f3068a3c1a3d3ad358f2d7b0c16b17e2c27ed5df4f958a3.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
558899faf39d65116f3068a3c1a3d3ad358f2d7b0c16b17e2c27ed5df4f958a3.exe
Resource
win10v2004-20230831-en
General
-
Target
558899faf39d65116f3068a3c1a3d3ad358f2d7b0c16b17e2c27ed5df4f958a3
-
Size
160KB
-
MD5
06ebe98f8a09e09f143785ba8011dc05
-
SHA1
bdf5d696422403b05db137257e0f1049514599a1
-
SHA256
558899faf39d65116f3068a3c1a3d3ad358f2d7b0c16b17e2c27ed5df4f958a3
-
SHA512
a917cacdc3456bb785e500a379a57ae75cc7a92d088b842a1a0ad3f931d2e91070859cd6a592718c23917c227c1bd7767b2ac8a73824717488e78a976d39de50
-
SSDEEP
3072:z8Tu02xOOKjAAdBykjYjTs4cAD8nOoHTmVt93j5yWIR27X:E2xOOKjAAdBDYjTsDAcTmVzlyWIR27
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 558899faf39d65116f3068a3c1a3d3ad358f2d7b0c16b17e2c27ed5df4f958a3
Files
-
558899faf39d65116f3068a3c1a3d3ad358f2d7b0c16b17e2c27ed5df4f958a3.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 158KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ