Static task
static1
Behavioral task
behavioral1
Sample
54d0989f09d0cf56e83f84afd3980056a701c9a518d29479f31d0540486fc605.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
54d0989f09d0cf56e83f84afd3980056a701c9a518d29479f31d0540486fc605.exe
Resource
win10v2004-20230915-en
General
-
Target
54d0989f09d0cf56e83f84afd3980056a701c9a518d29479f31d0540486fc605
-
Size
555KB
-
MD5
5c06e66dd6eae5aaf88a6b397de968f9
-
SHA1
089b72fecabed21e2ba9e092f52576b5810dc25c
-
SHA256
54d0989f09d0cf56e83f84afd3980056a701c9a518d29479f31d0540486fc605
-
SHA512
90ff7f6a468c4700a52c98da369cc2584dd1bd2417bd3b4d82d0afd6e488a3508967017e3a7c3239a71dc75ed44dfe04bc2033c0b3ea3ef72275814745752789
-
SSDEEP
12288:gzdVSUhwe/AZyfFN1czFKCtmbR3tlAD0U7xH:gzWdAFQFKSyG0U7x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54d0989f09d0cf56e83f84afd3980056a701c9a518d29479f31d0540486fc605
Files
-
54d0989f09d0cf56e83f84afd3980056a701c9a518d29479f31d0540486fc605.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 32KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_stext Size: 40KB - Virtual size: 40KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_data Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_rsrc Size: 203KB - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ