Static task
static1
Behavioral task
behavioral1
Sample
59210e5a1ed0c6fcba0c977eb14bdeb5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
59210e5a1ed0c6fcba0c977eb14bdeb5.exe
Resource
win10v2004-20231215-en
General
-
Target
59210e5a1ed0c6fcba0c977eb14bdeb5
-
Size
3.7MB
-
MD5
59210e5a1ed0c6fcba0c977eb14bdeb5
-
SHA1
b93987fa0f97978f26cfff29624da374fbf2976d
-
SHA256
183c94813829af9a62cf8c5c94a21c7b4acc0e20e6499deaa7ecd2938db6f86a
-
SHA512
b5630f3acb659130298af61697629509f9730d49f893c5e15414691d8d8baa08030ca2eafdc32c4b9ae5ee550445f5ce338882a87aa3e943443d5b9766473d37
-
SSDEEP
49152:GM7W8g6JxX6CcCuvRdLTQ3jA+JpulJ+bYgpnK:GM7WTgxX/R1jfpuoK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59210e5a1ed0c6fcba0c977eb14bdeb5
Files
-
59210e5a1ed0c6fcba0c977eb14bdeb5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ