Static task
static1
Behavioral task
behavioral1
Sample
f568c58f92cbd13e0de9d62810504411.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f568c58f92cbd13e0de9d62810504411.exe
Resource
win10v2004-20231215-en
General
-
Target
f568c58f92cbd13e0de9d62810504411
-
Size
2KB
-
MD5
f568c58f92cbd13e0de9d62810504411
-
SHA1
9585e361268bdb8fd5fb0f61d9eeb41cedd2437e
-
SHA256
30c57b7a9ff0d59b2ccd188ad4a43dea6b9d07a40ebb45d9e3e67ebd18c6cb9c
-
SHA512
795037d347bc8bc410fdaf07c79fe72ddb0b234de43f10155413cca3ed3176f54242e0d0ff1bb0bfd4087893f2d83f98042c2b31cc917ba2a21cddb6f9fb585c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f568c58f92cbd13e0de9d62810504411
Files
-
f568c58f92cbd13e0de9d62810504411.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ