Static task
static1
Behavioral task
behavioral1
Sample
59bb58f4404f919665f1b3fe78933627.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
59bb58f4404f919665f1b3fe78933627.exe
Resource
win10v2004-20231215-en
Errors
General
-
Target
59bb58f4404f919665f1b3fe78933627
-
Size
9.5MB
-
MD5
59bb58f4404f919665f1b3fe78933627
-
SHA1
d7bf7f917fccf339d1b09652e32fea6dab4d28b3
-
SHA256
941706f2eff903bcb031571117f236bc9bfd490db223eeffa1f9d02bf7a5cd9f
-
SHA512
621433d9279af23465df5fc0c21254d53c5952c68d19dae16f590e53161ca8eed3c42b2c94f7bc649e3660ac1f99798ca4bc1c37972ffefb2d515983eb1549d4
-
SSDEEP
196608:pd+zoo9FlwlQP1LGKMjq9pC9ajiantcgEZOi/9:plwSlQtaK30OcgEZz/9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59bb58f4404f919665f1b3fe78933627
Files
-
59bb58f4404f919665f1b3fe78933627.exe windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 110KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7.8MB - Virtual size: 7.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kveievqm Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jhlivats Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE