Static task
static1
Behavioral task
behavioral1
Sample
535db140dfadcf038ba4af0b13e24dc0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
535db140dfadcf038ba4af0b13e24dc0.exe
Resource
win10v2004-20231215-en
General
-
Target
535db140dfadcf038ba4af0b13e24dc0
-
Size
9KB
-
MD5
535db140dfadcf038ba4af0b13e24dc0
-
SHA1
75c58ffca2b14cb4db8b8d5840d99ab852d9a3e8
-
SHA256
6bb0beda17e1b0422b82695959c283ddd35eeb0906e3db67d37ce147a1bdb111
-
SHA512
fa3813ee121f383ce7f609a0c703d87e6ea5c9e716848078dc99a393be19493ac9440f66e56293693e1f7952d927f507bd4a26d8434d5c5aed1dabdc76762935
-
SSDEEP
192:QI4PpdSTHXlqN+fkj1WzGX4XfUGI4BF0m5gyyJyIobRj:JLTHXlqN+fo4Wix5dgy5b5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 535db140dfadcf038ba4af0b13e24dc0
Files
-
535db140dfadcf038ba4af0b13e24dc0.exe windows:5 windows
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.rsrc Size: 6KB - Virtual size: 32KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coderpub Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE