Static task
static1
Behavioral task
behavioral1
Sample
59f706cec6836692800a0650b0e8aac3cda238153dc3aa5fa54e83c59c1c6359.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
59f706cec6836692800a0650b0e8aac3cda238153dc3aa5fa54e83c59c1c6359.exe
Resource
win10v2004-20231025-en
General
-
Target
59f706cec6836692800a0650b0e8aac3cda238153dc3aa5fa54e83c59c1c6359
-
Size
6.7MB
-
MD5
c53fd889e0a63415773be0030351c385
-
SHA1
1769dd07a6987de846e1c92e27fd9fdff7df7e0d
-
SHA256
59f706cec6836692800a0650b0e8aac3cda238153dc3aa5fa54e83c59c1c6359
-
SHA512
854dfb5977c7ed9cdc824e6c8843518ad65be6aaca507e4f2f71dab923bb587002b0747c910bfb58b502237b2e3c7e64c0a59a54f4f579a8d25396b2e5196d28
-
SSDEEP
98304:tzYmKAq0oqOo9llcU7Zbz61sokJiq8TcMz4WahatSczT:tzYmHoqOo9lGU7Zbmqiq0z45s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59f706cec6836692800a0650b0e8aac3cda238153dc3aa5fa54e83c59c1c6359
Files
-
59f706cec6836692800a0650b0e8aac3cda238153dc3aa5fa54e83c59c1c6359.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ