Static task
static1
Behavioral task
behavioral1
Sample
58e5278e39d0782241b4210fc4db229c38b4997f01419b0c9534972c2f3b7c85.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
58e5278e39d0782241b4210fc4db229c38b4997f01419b0c9534972c2f3b7c85.exe
Resource
win10v2004-20230915-en
General
-
Target
58e5278e39d0782241b4210fc4db229c38b4997f01419b0c9534972c2f3b7c85
-
Size
4.0MB
-
MD5
2b5323e26024c3b53fb97052b1336faa
-
SHA1
7c03185806112cc6158912bb63cc0de9552c5214
-
SHA256
58e5278e39d0782241b4210fc4db229c38b4997f01419b0c9534972c2f3b7c85
-
SHA512
38832f4d0a63adb330d55b6158942c666fa4b48e7977992ea364784621c4c1753f0de77219c48454ec3eeea3f9a97b25abb017ae633b700db0575e57914aec30
-
SSDEEP
49152:vfg06mI7dqefIdSj1XkGW6rvsr5A0Mw9Y/hoZfQWFU+bZShd7vdBmadA831VDyl4:vzI7Rfnt74RnRlb8hdTU61hylpYmtM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58e5278e39d0782241b4210fc4db229c38b4997f01419b0c9534972c2f3b7c85
Files
-
58e5278e39d0782241b4210fc4db229c38b4997f01419b0c9534972c2f3b7c85.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.5MB
IMAGE_SCN_MEM_READ
VProtect Size: 548KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 3.4MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 48KB - Virtual size: 48KB
IMAGE_SCN_MEM_READ