Static task
static1
Behavioral task
behavioral1
Sample
529e3d5fef32fbed1d6a32ac5ec21425.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
529e3d5fef32fbed1d6a32ac5ec21425.exe
Resource
win10v2004-20231215-en
General
-
Target
529e3d5fef32fbed1d6a32ac5ec21425
-
Size
9.2MB
-
MD5
529e3d5fef32fbed1d6a32ac5ec21425
-
SHA1
51f1087e5c38cc7cd01d878f6a14ced111151a5c
-
SHA256
6a459e1299c68be0afd8dab95adf44aff56ad7478ecedad95da61afa4d6be23b
-
SHA512
14d5cddaf9b75f004de525e780b6c46fad8e4e3488d2a52adce11de8959b1e9ef7abd9fab8e0a8b5b683d0450f9ab8e6cc575e18c07e8ad554764dd9ca6e2429
-
SSDEEP
196608:SJydHZ5S+z6y9cHT014GubtKnoMR+tO7pH3LOdv3ZzZLa5Zo1H5k4LSSG1FMM:SJA54s9yY14QnnY6LOlpzlavwH242SI1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 529e3d5fef32fbed1d6a32ac5ec21425
Files
-
529e3d5fef32fbed1d6a32ac5ec21425.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 333KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13.7MB - Virtual size: 13.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ