Static task
static1
Behavioral task
behavioral1
Sample
539fa5f68c65867989d6b1c224cb4c3e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
539fa5f68c65867989d6b1c224cb4c3e.exe
Resource
win10v2004-20231215-en
General
-
Target
539fa5f68c65867989d6b1c224cb4c3e
-
Size
79KB
-
MD5
539fa5f68c65867989d6b1c224cb4c3e
-
SHA1
4aa75cd3cecba2d5f982311f45eb8269197244bc
-
SHA256
fe69c4ef5a7fc51b3171c1b492cdd096839159dd1b9333e2a553e5ce19b4f6b8
-
SHA512
88fd9b779533b088e3392544dfc9d04bbdab37a17fd9e16f13f3f55433d57aa51dc98f67a9826506cc69bb128fbbc2b014e84b782387676bd6e6fbb1509198bc
-
SSDEEP
1536:n9RzIfE30iLlRX0r/R05xb6YDI6td5jGmKQrYfTfVM:9dIfE300RX0zR05tnD9d56mTYxM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 539fa5f68c65867989d6b1c224cb4c3e
Files
-
539fa5f68c65867989d6b1c224cb4c3e.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
8r0k3n Size: 9KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8r0k3n Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8r0k3n Size: 5KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
8r0k3n Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE