Static task
static1
Behavioral task
behavioral1
Sample
571bac0418840a5854e103da3f80a350.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
571bac0418840a5854e103da3f80a350.exe
Resource
win10v2004-20231215-en
General
-
Target
571bac0418840a5854e103da3f80a350
-
Size
31KB
-
MD5
571bac0418840a5854e103da3f80a350
-
SHA1
81436786fced8aca13f2a503f4cb95259ba3faea
-
SHA256
3dedcf17b540b9cefa26b8ef3048e202eb740418ee5e859e5896ca82e6324f77
-
SHA512
5fd2f69ca136a9f5a005156429e077d87bd15e42d62079ec82569b7459457900d3e3d4048d363be4a0ff3c70de310d155a94e9c303a11249bf9a3f3d307d27d6
-
SSDEEP
768:dX6H1uwUhdMrKaM+vgg8Oxvaooim24zy:dXQYhdWKWDVjUm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 571bac0418840a5854e103da3f80a350
Files
-
571bac0418840a5854e103da3f80a350.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ