Static task
static1
Behavioral task
behavioral1
Sample
59b7e6cf14c3beba89234f3a02c61d0b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
59b7e6cf14c3beba89234f3a02c61d0b.exe
Resource
win10v2004-20231222-en
General
-
Target
59b7e6cf14c3beba89234f3a02c61d0b
-
Size
700KB
-
MD5
59b7e6cf14c3beba89234f3a02c61d0b
-
SHA1
53f9360ced3ed433a9f701b41b7e62b1f4eb2165
-
SHA256
cffdf7994104ea89432520d428898dd46b2f3ef7b8cc769f01407f7fdcc17fd3
-
SHA512
b139738a0a432e7eab6366d4cc20988972d568bd1924b72f77325897073558fbd0e3bb5731594ee6d7285e232c398975f9e1244c6a989a2066be57fa8ba1b93b
-
SSDEEP
12288:kB/x6SIkdfrTwCANovMUJMtlMG4znRijTY0F3Z4mxxoDqVTVOCk:M/YVkdTTwCAGUaGm/zx0QmXPVTzk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59b7e6cf14c3beba89234f3a02c61d0b
Files
-
59b7e6cf14c3beba89234f3a02c61d0b.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 21KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 348KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wjyl1 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE