Static task
static1
Behavioral task
behavioral1
Sample
058d36b820ab41b30c3ce26961ce8daf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
058d36b820ab41b30c3ce26961ce8daf.exe
Resource
win10v2004-20231215-en
General
-
Target
058d36b820ab41b30c3ce26961ce8daf
-
Size
200KB
-
MD5
058d36b820ab41b30c3ce26961ce8daf
-
SHA1
277de69fd3755f6a9a523f696e11a802fdc8cc35
-
SHA256
6c8ad9230366e56592bbcd8f70add2db760c065a34279e2ca3783c8c0c0b4fee
-
SHA512
aa20e1c4dc54e645b9450451830a7d45d98a5592909a8d99442fccf4fe22df28bf7ad0eaf5976a2f50ad738235dbdae8d7df24f2175c10ed05a4fb983e51f927
-
SSDEEP
6144:9jwKP66o/EkNeh1wQNhoBviIwx424JH4eTMz:D66oEjhRE5wxqIz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 058d36b820ab41b30c3ce26961ce8daf
Files
-
058d36b820ab41b30c3ce26961ce8daf.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 167KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 89KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ