Static task
static1
Behavioral task
behavioral1
Sample
537fd0f0b7221388839a5895959dedd0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
537fd0f0b7221388839a5895959dedd0.exe
Resource
win10v2004-20231215-en
General
-
Target
537fd0f0b7221388839a5895959dedd0
-
Size
883KB
-
MD5
537fd0f0b7221388839a5895959dedd0
-
SHA1
8714d5d60d625f94d004c6ee2057ad5f7bb01b42
-
SHA256
dc70c418e2d19cd5ad37cf6c6a60f03a567ee72c435a0d0b6da3dc48af4d3797
-
SHA512
eff909c05719e5aa416d893dc8687e182aebfc3a8d27d05e1d7e8c377a4c50b9df49221a68c907fc9fee07829e04e9d4e718d5a5d0bdf42d6cdc082be32d5743
-
SSDEEP
12288:cwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4ihozEQS888888888888W8888880:cNzCtUpQ9WWPBSSRMTEpXNb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 537fd0f0b7221388839a5895959dedd0
Files
-
537fd0f0b7221388839a5895959dedd0.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size:
Size: - Virtual size:
@ Size: 64KB - Virtual size: 1558.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
stem Size: 1668.2MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
Char Size: 4.0MB - Virtual size: 4080.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�����@ Size: 1174.8MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
Intege Size: 159KB - Virtual size: 1KB
IMAGE_SCN_MEM_DISCARDABLE
��@��@ Size: 4080.0MB - Virtual size: 1781.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
r Size: 1766.6MB - Virtual size: 4.0MB
Int64 Size: 4096.0MB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE