Static task
static1
Behavioral task
behavioral1
Sample
a6c590a5247a93d1b4f8e435bf8454a0_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
a6c590a5247a93d1b4f8e435bf8454a0_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
a6c590a5247a93d1b4f8e435bf8454a0_exe32.exe
-
Size
72KB
-
MD5
a6c590a5247a93d1b4f8e435bf8454a0
-
SHA1
1c5b94c236af3b3a40bb7f7ede93fb066d9fab23
-
SHA256
c77672c755c801581e7c00808868604406e3c95b8eb6695ef6c3a4dab392b122
-
SHA512
d4ce7e4293a831c75465cbf7445c3aff951ff97fc99a0c3856216fc82345b829a0ee701289a30a1c5b0b4e64bbd0ea7070a34cab1cd11bde4e2f1a5e3d78b6d2
-
SSDEEP
768:RMZwk7JTafgS+jdFThUSJfieyDcyyuoBXIQrny:CZFJTafg3hnfqYyyFBYg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6c590a5247a93d1b4f8e435bf8454a0_exe32.exe
Files
-
a6c590a5247a93d1b4f8e435bf8454a0_exe32.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 27KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vryeypb Size: 2KB - Virtual size: 2KB
.l2 Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ