Static task
static1
Behavioral task
behavioral1
Sample
562845a86013439d936b57a8d5cd289d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
562845a86013439d936b57a8d5cd289d.exe
Resource
win10v2004-20231215-en
General
-
Target
562845a86013439d936b57a8d5cd289d
-
Size
2.2MB
-
MD5
562845a86013439d936b57a8d5cd289d
-
SHA1
7ae37eeb88db85647057d24726971990a09b35b1
-
SHA256
6fd978f3266fc6fbc38572c47272689b6302ae668b8313350f522623a2d610a7
-
SHA512
6a382cb04cc330b1881450b438f654ece59107e219fc7e4727a098b79854f93ee9630ff226dc117890d909fdf94168209020afa390b2d923c25ffb503e818fcc
-
SSDEEP
24576:lsWNZv/dWKevSPby8xp7lpkx+AwDMdqL0Eve3+bq0sZrmdYxQt:lZl/k/IG8xp7lpAU8c45mht
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 562845a86013439d936b57a8d5cd289d
Files
-
562845a86013439d936b57a8d5cd289d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 666KB - Virtual size: 666KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ