Static task
static1
Behavioral task
behavioral1
Sample
509bbe5f8d14d3dca692c46c1efefc61.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
509bbe5f8d14d3dca692c46c1efefc61.exe
Resource
win10v2004-20231222-en
General
-
Target
509bbe5f8d14d3dca692c46c1efefc61
-
Size
1024KB
-
MD5
509bbe5f8d14d3dca692c46c1efefc61
-
SHA1
6733f1bc0e175616a12a028ce265535ebe37ed21
-
SHA256
b394d1ad1305c4d3229a2c4de1aa508c203d95f87664e2417ac2f351f108eec2
-
SHA512
c23f6090d33dbb5d3165f6ae39614cf773736c7f7ab0b1bc81ffbac6af54b52b2b94e8b547d551555d94b68a34ea28863bcf140b13d7ba626ebfec2d4a8253c9
-
SSDEEP
24576:dGgQz+SJrKJ+iF0PcjschyvI67pyzB3/qqo73GgfAQvTetFc:dGgo+SJh/cQGaE3/G3GgRvTeg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 509bbe5f8d14d3dca692c46c1efefc61
Files
-
509bbe5f8d14d3dca692c46c1efefc61.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 246B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE