Static task
static1
Behavioral task
behavioral1
Sample
579bfa448c26ead09794d336f643566a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
579bfa448c26ead09794d336f643566a.exe
Resource
win10v2004-20231222-en
General
-
Target
579bfa448c26ead09794d336f643566a
-
Size
117KB
-
MD5
579bfa448c26ead09794d336f643566a
-
SHA1
cdddfd19335283292e7f62e1d0aa8b6116cbbaed
-
SHA256
22b23afe9764d72ec3630812135464075fa1bd0f5755b1bd45732c12d2d93210
-
SHA512
49225bdf3b7ef1bd469ad3495ac8f95b53de1cdf4b97da85ff79e77a20ec840e17d03d431f1d8ecb7e5e2e4695430208da7c50578708588c257e49cdba1db7ca
-
SSDEEP
3072:Z6wFukSLvAOeRV5PpL3ev3bnYVRG7oI2ugp+P:8woFLvABFPIv3bYD492u0+P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 579bfa448c26ead09794d336f643566a
Files
-
579bfa448c26ead09794d336f643566a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE