Static task
static1
Behavioral task
behavioral1
Sample
58eff0f508ae3d5d60c0bbd45e4c12ca.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
58eff0f508ae3d5d60c0bbd45e4c12ca.exe
Resource
win10v2004-20231215-en
General
-
Target
58eff0f508ae3d5d60c0bbd45e4c12ca
-
Size
88KB
-
MD5
58eff0f508ae3d5d60c0bbd45e4c12ca
-
SHA1
3c73ccb3fa193bb141ad077274fe0008edbd675c
-
SHA256
e78caa3d6e8802b1137a3737af66c967ae69a606d1d4c3ed49aefad20a719661
-
SHA512
0cfa78776bca36ed23f01635f32fb0df210c5ba1c9ef988cde738bd93f6e85ef43b1da41c11c923b0fdb81bd31752f5c9f08e705dfffa3a2b5ea79d5786f36a8
-
SSDEEP
1536:/yMnerL705aGtSJj6+PRGilpjMHztW0+5YJrMZMu+MM+b6fbVIIFgRGiK:aeer305aIgj6+PEiAHztcWrMZMb+b6Df
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58eff0f508ae3d5d60c0bbd45e4c12ca
Files
-
58eff0f508ae3d5d60c0bbd45e4c12ca.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
v8g77b Size: - Virtual size: 96KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xnav4lfg Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
b9 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE