Static task
static1
Behavioral task
behavioral1
Sample
597d70421b2bd462240b514b81bf8389.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
597d70421b2bd462240b514b81bf8389.exe
Resource
win10v2004-20231215-en
General
-
Target
597d70421b2bd462240b514b81bf8389
-
Size
13KB
-
MD5
597d70421b2bd462240b514b81bf8389
-
SHA1
1c7a2c2301bd0a74c858fb913c72102cc2de8af9
-
SHA256
5e51f4f763611b3904526efd2fac0b637e544c57d10556171ddb4113d7f1a401
-
SHA512
8ce0999d5cbc610a7aebaa5d6eb9893f8fb9573b3abd02efd50807f40c24c749be54b0d3434448f7391f6b620b5ba380d7092f39716ca8ef83455ddbd4e18d2d
-
SSDEEP
384:azsKxwu5DCJ+y0+NzhGOae7Cdp5Y22m0:3KCJFZY33Qm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 597d70421b2bd462240b514b81bf8389
Files
-
597d70421b2bd462240b514b81bf8389.exe windows:4 windows x86 arch:x86
b71d8c1931cb0a297806c1529ed52c6b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle
Sections
.text Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE