Static task
static1
Behavioral task
behavioral1
Sample
578d617357cfdfbdab1ac7f60b7a4470.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
578d617357cfdfbdab1ac7f60b7a4470.exe
Resource
win10v2004-20231215-en
General
-
Target
578d617357cfdfbdab1ac7f60b7a4470
-
Size
885KB
-
MD5
578d617357cfdfbdab1ac7f60b7a4470
-
SHA1
40c6d8f057a606a13e0a4fdac8f2ff69b4ed739e
-
SHA256
50a997787b48c46f5c8351228b9448271da6a285510e8c29dcca5053ffcc1bbc
-
SHA512
b95fff693014a02d43d4d01b74b3dc73aafcc064170fe6f12628db52b0c017a61bf943c6aac002d3148324e53093b5706e770108f2268076dd28c9320c444fdc
-
SSDEEP
24576:UBuxByNAIjv4EE690+mf45H3FtTJVxMgr:UyKEdu7TJVnr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 578d617357cfdfbdab1ac7f60b7a4470
Files
-
578d617357cfdfbdab1ac7f60b7a4470.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 596KB - Virtual size: 596KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ