Static task
static1
Behavioral task
behavioral1
Sample
290041359ffc5fa284f87a89aaa4b578.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
290041359ffc5fa284f87a89aaa4b578.exe
Resource
win10v2004-20231215-en
General
-
Target
290041359ffc5fa284f87a89aaa4b578
-
Size
90KB
-
MD5
290041359ffc5fa284f87a89aaa4b578
-
SHA1
a2a0069f25b25f7c64941507ee22042980c94be3
-
SHA256
e9ee17ad2ba2792f7288738753924afea919b07e6a0d456c65c14055c5b9f8f3
-
SHA512
a6944bf4e072117cb3734ddaad3d73f0d01efbb20bc924ce04a2869f48850c1e21471e06388e89d63ff172f92d024b855be3627c400409f9390b60af2b4a57ed
-
SSDEEP
1536:syeLQnkqNzgkCI1A+vhUBOhwWiiksVUjGSEUwrgIQPM5:eskuP1A+vhUMNibq6GSvQzUA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 290041359ffc5fa284f87a89aaa4b578
Files
-
290041359ffc5fa284f87a89aaa4b578.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 660KB - Virtual size: 660KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ