Static task
static1
Behavioral task
behavioral1
Sample
503ab2586ad71c21b046f88a4307e2c2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
503ab2586ad71c21b046f88a4307e2c2.exe
Resource
win10v2004-20231222-en
General
-
Target
503ab2586ad71c21b046f88a4307e2c2
-
Size
356KB
-
MD5
503ab2586ad71c21b046f88a4307e2c2
-
SHA1
6ec6b0f7a89199118cafac96e9e70bff068d644a
-
SHA256
ca36a02b5875190774d0bde1372de8e8687cd31c234c69794a52a8eed2c0b329
-
SHA512
e32ec35a96a98ef61722b7b0d98046b8b46f5559a1c4902c97ceef92ff5fec0eea3287cb6302d87c3e54cebd381f1f794e68c73d6ba4f5f8e7e54640d5f54022
-
SSDEEP
6144:vM1SMgC0Jowurr5AEWD0br49fujyZEY6/4Wwpac/zK7LWmwYV12wxE6UnQotc76W:vM6urr5U/ZZE7QWwpTzK7tV1mZc769k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 503ab2586ad71c21b046f88a4307e2c2
Files
-
503ab2586ad71c21b046f88a4307e2c2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xur Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE