Static task
static1
Behavioral task
behavioral1
Sample
59bf80656eaa3a4d439aeb5a153739d9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
59bf80656eaa3a4d439aeb5a153739d9.exe
Resource
win10v2004-20231222-en
General
-
Target
59bf80656eaa3a4d439aeb5a153739d9
-
Size
33KB
-
MD5
59bf80656eaa3a4d439aeb5a153739d9
-
SHA1
3e34af7b0c16bf2af117087c6c8f617b136674bd
-
SHA256
81024f2014cbeaeb2427a8d393d61adc390d7edd86b99449b55200b1313ad2f4
-
SHA512
ab022cf061282e0e03612f81545758d08b08a8ee867b90f92a9d019312815ea4e56ba9951ff167e684279eb5ee1fd474131a1d8d8e7a89a141df97ce51aafd8e
-
SSDEEP
384:+oSjOnHtQX0o4FARrWJkcyDPMves3YFNkjMmNrBxNRQLc8TYiypTthgNTuYXw5gU:TS6ukyOIuPMmNtxNr88fhUuAw5g1+3J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59bf80656eaa3a4d439aeb5a153739d9
Files
-
59bf80656eaa3a4d439aeb5a153739d9.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 25KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.avc Size: 512B - Virtual size: 349B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nah Size: 1024B - Virtual size: 676B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ