Static task
static1
Behavioral task
behavioral1
Sample
542cdd426b99d33754600ca62c026e41.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
542cdd426b99d33754600ca62c026e41.exe
Resource
win10v2004-20231215-en
General
-
Target
542cdd426b99d33754600ca62c026e41
-
Size
49KB
-
MD5
542cdd426b99d33754600ca62c026e41
-
SHA1
59eca1ec5fcc496043c0490669907e447d54b73d
-
SHA256
4d0cc1865678c8d2e91221fd20c80835ecbb42905d9c979c74242028d45a9172
-
SHA512
325b47c0503df25a62324761942bc6e2f7ebca008a025369c734d33f0dc075f4883f61cf7e1c610aa0c45211ac85e8c854d60ded28689aa5ea4f62fe6fa26242
-
SSDEEP
768:RM6vXHIn3W6z2SXibYPIKLiQZXVHjVRyYLv+OJxy8XBb2ffxUTQKwyIVOrpJp:RMUonmaXi/EZX9yYLxvxksyYpJp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 542cdd426b99d33754600ca62c026e41
Files
-
542cdd426b99d33754600ca62c026e41.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 13KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ