Static task
static1
Behavioral task
behavioral1
Sample
595822c6dd0a7e9a8232da5f780e5117.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
595822c6dd0a7e9a8232da5f780e5117.exe
Resource
win10v2004-20231215-en
General
-
Target
595822c6dd0a7e9a8232da5f780e5117
-
Size
95KB
-
MD5
595822c6dd0a7e9a8232da5f780e5117
-
SHA1
31bc2744d9361c5b12dbff38d77259c3e5039a0e
-
SHA256
e823a5ed8ce31915ed52e25cf799d44d10ae5789d9a346a04f04da5693819eb5
-
SHA512
ce9527ecec35729aaaf3f08f4d5ce00f4b58adbdd1c2d4abced48cd10cf32c62373723f6be7c5ac0ee9c0b75f3843b85cf09c4ab55fdabc18a457438c55a6f62
-
SSDEEP
1536:qEQ6B6MKw1XSFrzDv7L3et9ecFwLQGzCLe66DB4XAAJCs4bdu5nZxG:qEp0MnBSFnf70LfGGerJin4o5nPG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 595822c6dd0a7e9a8232da5f780e5117
Files
-
595822c6dd0a7e9a8232da5f780e5117.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ