Static task
static1
Behavioral task
behavioral1
Sample
54cfff76a26272dd8db86eef11b1d8ff.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
54cfff76a26272dd8db86eef11b1d8ff.exe
Resource
win10v2004-20231222-en
General
-
Target
54cfff76a26272dd8db86eef11b1d8ff
-
Size
32KB
-
MD5
54cfff76a26272dd8db86eef11b1d8ff
-
SHA1
a7680b36904dd3836286b98cd5bacc4337850ad6
-
SHA256
568d47f1843ca467126cfd89b508e94fd76860f106bb88221147efec4c565d35
-
SHA512
8c8e1979744e2ae34730a153fe16c614f138ad1ea3db7cbb037c2d2997c428990a9e68f1e23bfa0a1b9d443b620d67751125aeba30e80196a3fed620ac0f94a5
-
SSDEEP
768:JBCkUl0kqYwoxzTSIEqb9BI4ehE82xZMCtFvy2gwWn:Jwvq9oxvBEs7e/2xvgwWn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54cfff76a26272dd8db86eef11b1d8ff
Files
-
54cfff76a26272dd8db86eef11b1d8ff.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ag68usxa Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hegpbv88 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ