Static task
static1
Behavioral task
behavioral1
Sample
588a5a1b1aa0e2dbace416ad7a5bf497.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
588a5a1b1aa0e2dbace416ad7a5bf497.exe
Resource
win10v2004-20231215-en
General
-
Target
588a5a1b1aa0e2dbace416ad7a5bf497
-
Size
1024KB
-
MD5
588a5a1b1aa0e2dbace416ad7a5bf497
-
SHA1
b3dac140d11fe9ea9ee55d6a1ee421a00ff375c0
-
SHA256
6abf12b97ad46e0b7bb117168ec826769e18ba859508ed8c411410f679aea12c
-
SHA512
f072ae1d4c50cfc4b79ff073fd3d0a1925252b1fd0c1e0b2186d4e9789a7bff6278f6acdb7d7393366adda208ba9480475954b6565dd3f4a79890eb8b161b91e
-
SSDEEP
24576:Xt1ZKv++6OZFUh4MjDG5wt9adtX8qkL2OG/YRzEK8Ax:T2++fZChRjD2ldtsTLNGwEK8M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 588a5a1b1aa0e2dbace416ad7a5bf497
Files
-
588a5a1b1aa0e2dbace416ad7a5bf497.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 165B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE