Static task
static1
Behavioral task
behavioral1
Sample
594997fb8bbf1864c3f3d641541e3cd6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
594997fb8bbf1864c3f3d641541e3cd6.exe
Resource
win10v2004-20231215-en
General
-
Target
594997fb8bbf1864c3f3d641541e3cd6
-
Size
1.6MB
-
MD5
594997fb8bbf1864c3f3d641541e3cd6
-
SHA1
e1d79cc6ef45e1b1e4d3919deee9b0206685288b
-
SHA256
197e06c091ac18eab40f8e709a88c287e39c116f572a28190d2c5f314a429a60
-
SHA512
0e350983f7af004f42fd6a1fe3de42c4b2c5636e11eb29b379be046314ca8046812ee51cd23a2c6527ff443a558284015fd156876c4df2c5fc2d81e7020a9159
-
SSDEEP
49152:vXJt/6QY71kiuJ5Q2UW7VMidA4qqtPzibur/:vXjA1kiuX1eUSqtwK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 594997fb8bbf1864c3f3d641541e3cd6
Files
-
594997fb8bbf1864c3f3d641541e3cd6.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 417KB - Virtual size: 844KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qxbacmyb Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wjqxazei Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE