Static task
static1
Behavioral task
behavioral1
Sample
54c161eb115b7834799941134a58580d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
54c161eb115b7834799941134a58580d.exe
Resource
win10v2004-20231215-en
General
-
Target
54c161eb115b7834799941134a58580d
-
Size
9KB
-
MD5
54c161eb115b7834799941134a58580d
-
SHA1
c80c3323ea8df2d87c27af89f598f57354e49d29
-
SHA256
b551bf75dac4035f5fc50493f2bb4987d022229bde28a3b2f87f4f8a31663262
-
SHA512
2d021f428453ad3f011298d9ba89a6bbb5a7a6c4da6ae60b698df11d2853317194ea6a24ff6705fc35f62d1a78709daf02a2d83fb44db97e5406aa1c257fd1f9
-
SSDEEP
192:BBksuL9MuI7ODeMZZ3P93VnjdwqzYs3RejuND:ulgODeMpFnhwq8sMyN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54c161eb115b7834799941134a58580d
Files
-
54c161eb115b7834799941134a58580d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ