Static task
static1
Behavioral task
behavioral1
Sample
535ecb5b02c440cc09e24b7ad08a507d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
535ecb5b02c440cc09e24b7ad08a507d.exe
Resource
win10v2004-20231222-en
General
-
Target
535ecb5b02c440cc09e24b7ad08a507d
-
Size
65KB
-
MD5
535ecb5b02c440cc09e24b7ad08a507d
-
SHA1
928c3ad5282d340288c89beaba0f99e9b2793eea
-
SHA256
4300506e1fbda3b16401db4c9ac30eb241eee65cf164a2ff1b4390b30dbf6f36
-
SHA512
d9a2cd63d9613091e26b32c1989b976fa7e5d02882004d647f589d8baf28bcfff180be34a7f5b24997353268c0bb8e6921fb5843aa4b1b9ceb94a7f97b729712
-
SSDEEP
1536:BuLy2+o7mUm4PTKRH19ypZV1A2Ki9w1+DEB7:ILyqc4PT6Heg2Kww1+D2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 535ecb5b02c440cc09e24b7ad08a507d
Files
-
535ecb5b02c440cc09e24b7ad08a507d.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 178KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 40.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ