Static task
static1
Behavioral task
behavioral1
Sample
554264eb642c4b2790ae5cfb0197dde0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
554264eb642c4b2790ae5cfb0197dde0.exe
Resource
win10v2004-20231222-en
General
-
Target
554264eb642c4b2790ae5cfb0197dde0
-
Size
318KB
-
MD5
554264eb642c4b2790ae5cfb0197dde0
-
SHA1
0da6124d744d3b166346c8f399b5213587c234da
-
SHA256
8eccee82c0abe6901e3d733a6cc1d517829eb594ad8cd4b329d1950058f60b89
-
SHA512
58657537bb38f8462ff45da236129112edc4d26254e9d78e8a438dcfcc19471f1483bb5381de4e6cb0f2f4ed2a067ecb684d931b6aabb27851c0bbe6265da6b5
-
SSDEEP
3072:R+QGB8zNmVMYSxKeobNKcf09c8wfCL7uQ/IpRoutyVX9iWAo1f:R+NB8YutgeoJc9XL5WoSyFLf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 554264eb642c4b2790ae5cfb0197dde0
Files
-
554264eb642c4b2790ae5cfb0197dde0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 824KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 139KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE