Static task
static1
Behavioral task
behavioral1
Sample
523c98eb4446f05602450e879d9230cb.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
523c98eb4446f05602450e879d9230cb.exe
Resource
win10v2004-20231215-en
General
-
Target
523c98eb4446f05602450e879d9230cb
-
Size
702KB
-
MD5
523c98eb4446f05602450e879d9230cb
-
SHA1
dbb610cf26f80a3678c1479ae6a990519ae2799c
-
SHA256
bcde2f82c72ec9418996af5747898b779789635dd20ac01901ce8155dc8b2543
-
SHA512
331c1f2246539cec1a7e7421096bbb685bef20b310dfb0d7817bcc3711af255a7e5cb3aa866829d43c488b014366aa2be8ddb451cf73b2d3ef7b1912b1eb4db3
-
SSDEEP
12288:JEyPJptvNBTXu3wnaBj/uKZLxBiTpc7ITJgBFlp423Qc0UMD0Q5J+CV0FgnkS1eC:DxXlaZ/pZLxIu7IT2Bv+ZcL45J+Inp1J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 523c98eb4446f05602450e879d9230cb
Files
-
523c98eb4446f05602450e879d9230cb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ecode Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ldut Size: 495B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE
rsrr Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE