Static task
static1
Behavioral task
behavioral1
Sample
539.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
539.exe
Resource
win10v2004-20231020-en
General
-
Target
539.exe
-
Size
108KB
-
MD5
12e549ab27fdbecaacba6ab0e1163630
-
SHA1
762651959b6cc317efb5d947cabb56893737d674
-
SHA256
fa95e1addf2f2189cb82a742e4839b7f2a28469cc9752eecf145af88eeb2ef67
-
SHA512
b2d204a82927dd74bc8f70c8b6c7428a1032e0add7bfa216cc19f5e888860c7437dd763838e17b254db56b88b8c2bc769be3ba7c97a79458cbfee497b7617e63
-
SSDEEP
768:6TOlV66rAIpK90U/0bl6/UspvfIoSmHVdS5SS82ZtwviGAenS5SSaiS5SSg2S5S/:lu6rFpKGO0b8S7uY2eBZw8ZTjBq5V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 539.exe
Files
-
539.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ