Static task
static1
Behavioral task
behavioral1
Sample
2595e43859b290c08e87beccd027ce18.exe
Resource
win7-20231215-en
General
-
Target
2595e43859b290c08e87beccd027ce18
-
Size
1.5MB
-
MD5
2595e43859b290c08e87beccd027ce18
-
SHA1
9ab8a068516841f4c463325c6f18e511f55179b7
-
SHA256
51090438b69c222c7cc84f040140d50e3f3aa6095921326a441d4b7ecedd1570
-
SHA512
00bf9ce3754323c758fa7a9198c0e31905f3efc603faba67d9f03e05e04b7ac472f98c19165a283a71bdbd6e343aab9c75780fbf4e74a6fe87bb13f42f4f412b
-
SSDEEP
24576:97+dUNT0V6oJ4YECn+UNbxFotrPM532+UfoE9ZrbKR6a:WUXDCnB5xFotrPM532+UH9I3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2595e43859b290c08e87beccd027ce18
Files
-
2595e43859b290c08e87beccd027ce18.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ