Static task
static1
Behavioral task
behavioral1
Sample
42af32cb600e6324552b513cfef3d3d1.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
42af32cb600e6324552b513cfef3d3d1.exe
Resource
win10v2004-20231215-en
General
-
Target
42af32cb600e6324552b513cfef3d3d1
-
Size
140KB
-
MD5
42af32cb600e6324552b513cfef3d3d1
-
SHA1
956bd7cbad9a4cd2d1fc522c8565c219e2dae2f7
-
SHA256
83157ccd8b2e0e388f6b609b25e91cf0a44c3c9b7f135591bead9a3bbc68aaa4
-
SHA512
231d3399c70125c22434860c62b8a848446d8b708f370223db90bc2b233a68c06beea04815ac5779efda3aff0ab2bf53c37d12b1bd4cd25e6b190a59bd49df5f
-
SSDEEP
3072:TDss0iLwmemaBmzDX2ME+RXIlqbpQBrz58plWVrqVH:TDssT88cgGME+RXgqbpQ9zQ8IB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42af32cb600e6324552b513cfef3d3d1
Files
-
42af32cb600e6324552b513cfef3d3d1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 134KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mmym520 Size: 49B - Virtual size: 49B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaohui Size: 56B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
520xh Size: 32B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pe�� Size: 88B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaohui Size: 56B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
520mm Size: 79B - Virtual size: 79B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ