Static task
static1
Behavioral task
behavioral1
Sample
731e59b6629e3fd33ce8ce879654c515.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
731e59b6629e3fd33ce8ce879654c515.exe
Resource
win10v2004-20231215-en
General
-
Target
731e59b6629e3fd33ce8ce879654c515
-
Size
89KB
-
MD5
731e59b6629e3fd33ce8ce879654c515
-
SHA1
0bcbf894928efa23a8287e7ac79bc8f34493ba76
-
SHA256
33f1a043475ff647ea5c86cf18abf9b6470ab3b5e70a98aacd013173033dcf0a
-
SHA512
ca9ff63b567a1148b31951652870ccc35a6b9dc306d56037b144761a382239c3d84ca017ce4d51d0b6f154a68ec9485ea110ddea8822382c7f5d7dba4170e931
-
SSDEEP
1536:wqsHZINfCtu7onwnfHMn3aVp/AQQkKhOG8cXxlBZbb+sR0g/ZRXKX1r6I8Mf0jx:D+yNqn4P83YKwLcXhZ3IO4X1Gx9x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 731e59b6629e3fd33ce8ce879654c515
Files
-
731e59b6629e3fd33ce8ce879654c515.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
!!faks!! Size: 84KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_Fayda__ Size: 512B - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
@emcik@@ Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE