Static task
static1
Behavioral task
behavioral1
Sample
58210856c544349d856d318906c65ae2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
58210856c544349d856d318906c65ae2.exe
Resource
win10v2004-20231222-en
General
-
Target
58210856c544349d856d318906c65ae2
-
Size
103KB
-
MD5
58210856c544349d856d318906c65ae2
-
SHA1
bd394dff9324bd0d986bed8ae6d9a4717e8ead26
-
SHA256
55a4ac5e37a98174011eedb99f4cb90992ea81b88a84de96b3a61262cb8760e6
-
SHA512
3c991212272b2be30d4b321e028e1d6b8464ca9e77eb69db848b680bd75323864203d7d1d7ce3295f04417a80652dc5855a6bb01c0f428a06a29c689c0cd8202
-
SSDEEP
3072:NCag1D5hwdrAvQ8JU8G0evQ5JxVYWx0l2P2:1dxr8D3VFxZO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58210856c544349d856d318906c65ae2
Files
-
58210856c544349d856d318906c65ae2.exe windows:4 windows x86 arch:x86
a56f115ee5ef2625bd949acaeec66b76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
Sections
.data Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ