Static task
static1
Behavioral task
behavioral1
Sample
509fbe51fe2cbaf044fd846354a3cfae.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
509fbe51fe2cbaf044fd846354a3cfae.exe
Resource
win10v2004-20231215-en
General
-
Target
509fbe51fe2cbaf044fd846354a3cfae
-
Size
2.5MB
-
MD5
509fbe51fe2cbaf044fd846354a3cfae
-
SHA1
32b559ea6fab33082e229d928422413e5f6f8436
-
SHA256
19c49c0bad3cc0f3753cb6201c0b73f2431122b4d93bff94d8848f1bf6686f91
-
SHA512
f36a1a84d569452b3fd37754a83a27bbc54312c5dcefd1afa8ee6ac0fa7a288466acda5ebb070ad5ae2c41fc5e03a25dc353e428485abc68f560597f4c084357
-
SSDEEP
49152:fFOOLWSor2VcKbxaAOUBAoEkm5ZdVFpTnpTXHIdaUPdOSrk5zXFmipq4aTaPoHd:tO8LoyBAoJmPHFhpXobPtkJX7pOSo9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 509fbe51fe2cbaf044fd846354a3cfae
Files
-
509fbe51fe2cbaf044fd846354a3cfae.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
test Size: - Virtual size: 988KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 625KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE