Static task
static1
Behavioral task
behavioral1
Sample
57950fd54a40e27ca46c03498aad09db.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
57950fd54a40e27ca46c03498aad09db.exe
Resource
win10v2004-20231215-en
General
-
Target
57950fd54a40e27ca46c03498aad09db
-
Size
108KB
-
MD5
57950fd54a40e27ca46c03498aad09db
-
SHA1
85ce735657a5bafcf2e1995aff767086936e5dbe
-
SHA256
a4674ae3ef0221fb1694a084597f6218fd063b9e1127f9c463b8a63ffd743e47
-
SHA512
debebc9ec5a53e43f6f8bf6dad47f35a8ec3c6d24259072c58660ad6a287ce0dd2d1c21da38396b735e78c28ea73e8c8b2db3699c92fb08a7b3b47f1c5cd843c
-
SSDEEP
1536:XyCwmD7fu+M6UK6EzxNXB/XWX5XdXZXOXlXtXuXxXiP3P4C91RI//0nB0V4nhnOr:Xxb6Ezx7P3P51RI//0nB0CnhnOr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57950fd54a40e27ca46c03498aad09db
Files
-
57950fd54a40e27ca46c03498aad09db.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
pec1 Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pec Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mackt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE