Static task
static1
Behavioral task
behavioral1
Sample
597f6a445ff6edc6a9297224475f15e8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
597f6a445ff6edc6a9297224475f15e8.exe
Resource
win10v2004-20231215-en
General
-
Target
597f6a445ff6edc6a9297224475f15e8
-
Size
48KB
-
MD5
597f6a445ff6edc6a9297224475f15e8
-
SHA1
68e0935d57f235f6b8e44f4ecad59d475dd0e944
-
SHA256
84393bdd5784eb30ff483f126d91da0db4b408d2e2a017a1aa32e3f78329b663
-
SHA512
fca0747f662a2e559cc0bf0484894b405b36febf26665e3a37aefbb1825da0dfb5b1080354b31e3fd413732ddc670562c95180489fa853971f00212d6e5cbf82
-
SSDEEP
1536:zG2X3wOz3EwQjfJDBh1MOmqus+j7mUvWGZ+lC:zG63EZRGqp+j7GzC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 597f6a445ff6edc6a9297224475f15e8
Files
-
597f6a445ff6edc6a9297224475f15e8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE