Static task
static1
Behavioral task
behavioral1
Sample
58a0d1eff977ad0f6dd10678287367a9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
58a0d1eff977ad0f6dd10678287367a9.exe
Resource
win10v2004-20231215-en
General
-
Target
58a0d1eff977ad0f6dd10678287367a9
-
Size
478KB
-
MD5
58a0d1eff977ad0f6dd10678287367a9
-
SHA1
0d8d11e921ae7f2551bed149f1dc4036002f889a
-
SHA256
66dcdf7b63fe63008ecfbe44b10d9538ff70deeac6ef61cfc7e2f3dc899f3a38
-
SHA512
21022cedca08963c9a57f0b5e89567a923d2308d00b253f595a881eed010d46a6c194dcb5d72bc5755c5af7f8f0993ea034a6137ededcd4fdaa581e72007ca76
-
SSDEEP
6144:5TenDj0oDgHR38pjT4D1H/Ujf/bzb0+hgsVCTWIBpmm8r9+wRhymSrljvhPaPVXt:56X9A381BL/bzLPIBUmG3V585uyaKo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58a0d1eff977ad0f6dd10678287367a9
Files
-
58a0d1eff977ad0f6dd10678287367a9.exe windows:4 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
Size: 209KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 102KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE