Static task
static1
Behavioral task
behavioral1
Sample
595bc52e8c9245db8e12cf3e024bc048.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
595bc52e8c9245db8e12cf3e024bc048.exe
Resource
win10v2004-20231215-en
General
-
Target
595bc52e8c9245db8e12cf3e024bc048
-
Size
129KB
-
MD5
595bc52e8c9245db8e12cf3e024bc048
-
SHA1
c33ec371a6a49cb4518f94f6d10f121e6b4c8e60
-
SHA256
612f9d8a42dc8837bbe184ac56674a8a889e3ec2cdc9502343ed98cdc4048689
-
SHA512
73da9e42cb2f03fc696873cbe1e7a30a974a3f01ee13d4046adb1fdd41ae26e64ed2b27189b739d31549dfa1d1b9d1b9c81e531101799a812e6f2222b2597334
-
SSDEEP
3072:5Rx0riLZl1bnZoB5MCnq62sen9wHr0B6Tf2KGjlcQm9+UzAzn:xbZKnqRTQTyTGQlCE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 595bc52e8c9245db8e12cf3e024bc048
Files
-
595bc52e8c9245db8e12cf3e024bc048.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
v Size: - Virtual size: 216KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
f Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9k8 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE