Static task
static1
Behavioral task
behavioral1
Sample
581e0692f61069c055c785e77cb10df8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
581e0692f61069c055c785e77cb10df8.exe
Resource
win10v2004-20231215-en
General
-
Target
581e0692f61069c055c785e77cb10df8
-
Size
28KB
-
MD5
581e0692f61069c055c785e77cb10df8
-
SHA1
0f898b380cdf90779bee8b10088190b1e61ea066
-
SHA256
54c0f79502cbb04d71096c54c7ecf42a76f1039e08285be3a3ece2e53d110cb6
-
SHA512
50123b9adc82afeae403757e62b7e6c76ec7f4992ab9ae1c894686f9ec5859601223893930b970a5b9d9ead62094ed572bf39e0845ab0f065774061d6bd70c87
-
SSDEEP
384:s5OcPkCZse8qTnp+OnO0j4yJTFLnhFwxMJDIlw5htkeYtMGGFkIns:s5XL/zAt09VpnhKxMJDIlwnTFds
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 581e0692f61069c055c785e77cb10df8
Files
-
581e0692f61069c055c785e77cb10df8.exe windows:1 windows x86 arch:x86
68675c8b50c5ad2ebdcafc2660a2c3cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
IsBadCodePtr
GetCurrentThread
LocalHandle
Sections
����t Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 28KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE