Static task
static1
Behavioral task
behavioral1
Sample
509daf1d500affde77b52310ba7fb113.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
509daf1d500affde77b52310ba7fb113.exe
Resource
win10v2004-20231215-en
General
-
Target
509daf1d500affde77b52310ba7fb113
-
Size
198KB
-
MD5
509daf1d500affde77b52310ba7fb113
-
SHA1
1e69a038fd1563f7af4ebd0d14ec8d36be07f0e6
-
SHA256
691cc1948cd55e8ccc2ed21406babfba642ae7057b47c323cf65ac56b8312a76
-
SHA512
930ec445a16e6a11f97305ccce96ab0d637d723957fc8e0b2774a7dab5b16d464c1a38381ef35605b8c1ffd7ae2ec9c30e8a2b64f345a17106eb787771303de6
-
SSDEEP
3072:B8bG7d9quXIEfECfOvu1klM/av/sTvout9u1kS:B8KTquIGJ7an0oSMr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 509daf1d500affde77b52310ba7fb113
Files
-
509daf1d500affde77b52310ba7fb113.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE