Static task
static1
Behavioral task
behavioral1
Sample
58f1199b990997ccd6135b8b724207c8b16d65b40054f8d509376dd3a09e99d8.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
58f1199b990997ccd6135b8b724207c8b16d65b40054f8d509376dd3a09e99d8.exe
Resource
win10-20231020-en
General
-
Target
58f1199b990997ccd6135b8b724207c8b16d65b40054f8d509376dd3a09e99d8
-
Size
431KB
-
MD5
b18c34920d9d93caa2252c73a777658e
-
SHA1
0806bc4f1f49f41b454028f99fdfcabd28256632
-
SHA256
58f1199b990997ccd6135b8b724207c8b16d65b40054f8d509376dd3a09e99d8
-
SHA512
aa97fbf4406ddf5d4891fe7d24d55d58448d649c3488a4f7a8366ff44a343a47065d9da6bc0c8ecdb2adc2a5553148c16db7cf1dfff8c033c666917b5adc77f9
-
SSDEEP
6144:bZValdprSa0ggsXBs1JzBy7fupXxGiMFIBNRqm6PVVAXPmP3/a4ts84gwvEM9qjF:lValdpV0/8H7+E78XPFOsMwvEM9qh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58f1199b990997ccd6135b8b724207c8b16d65b40054f8d509376dd3a09e99d8
Files
-
58f1199b990997ccd6135b8b724207c8b16d65b40054f8d509376dd3a09e99d8.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 347KB - Virtual size: 350KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qrnzx Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nhfgbv Size: 572B - Virtual size: 1024B
IMAGE_SCN_MEM_READ