Static task
static1
Behavioral task
behavioral1
Sample
59bc52c655c5311a1756ccacb1bffce6.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
59bc52c655c5311a1756ccacb1bffce6.exe
Resource
win10v2004-20231215-en
General
-
Target
59bc52c655c5311a1756ccacb1bffce6
-
Size
179KB
-
MD5
59bc52c655c5311a1756ccacb1bffce6
-
SHA1
4aaa32bccf3449ab02846e738b0e9eeb880efd39
-
SHA256
22fec04b3af8c88378bcad66d0c993c1b16cfb3d8d0452eda7af7ed536654385
-
SHA512
4f3bedc4545573f23f96f85c9111bb20abab865f2fa878d5af8baffeb98f4d30ccb3744f0140eaa5cc521af84fc015b32359ab8f9594cf8d22389acc29128123
-
SSDEEP
3072:IFmxsczyRrAO75U+31DjsAZ8yTyZMCAeABPhyPoJz//hMhfWCMHYHZpsoOFL7jcb:IQ2RrAO7zBjsAjTyZMCAeABPuyznkbMm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59bc52c655c5311a1756ccacb1bffce6
Files
-
59bc52c655c5311a1756ccacb1bffce6.exe windows:5 windows x86 arch:x86
f020e1a2feae651f7ce88318f285b500
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
gdi32
BitBlt
advapi32
OpenProcessToken
shell32
ShellExecuteW
ws2_32
WSAStartup
Sections
UJHFFTRT Size: - Virtual size: 580KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UJHFFTRT Size: 178KB - Virtual size: 180KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE