Static task
static1
Behavioral task
behavioral1
Sample
ad58d6c8cb959839e6464a20128cde48cc9b06b61a1489e43b7b81a020457eeb.exe
Resource
win7-20230831-en
General
-
Target
ad58d6c8cb959839e6464a20128cde48cc9b06b61a1489e43b7b81a020457eeb
-
Size
33KB
-
MD5
a1f73658520a973a1e88a29d4ad7c967
-
SHA1
8ce8595794cff91aa349342fd84071a76758a90e
-
SHA256
ad58d6c8cb959839e6464a20128cde48cc9b06b61a1489e43b7b81a020457eeb
-
SHA512
cc8558290782438f63428ca32bfecbd98252a35aca52598373829685610d4865978f12940ec57463914d0023eebafe15689ce28c61a32865f630bb18c25bff5c
-
SSDEEP
768:0tVElOIEvzMXqtwp/lttaL7HP4ATCf0vn4DAwdHtLuQN:0tVaYzMXqtGNttyOf0v4DAyNjN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad58d6c8cb959839e6464a20128cde48cc9b06b61a1489e43b7b81a020457eeb
Files
-
ad58d6c8cb959839e6464a20128cde48cc9b06b61a1489e43b7b81a020457eeb.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE