Static task
static1
Behavioral task
behavioral1
Sample
59634db4348765c088ad8ef293879ea0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
59634db4348765c088ad8ef293879ea0.exe
Resource
win10v2004-20231215-en
General
-
Target
59634db4348765c088ad8ef293879ea0
-
Size
385KB
-
MD5
59634db4348765c088ad8ef293879ea0
-
SHA1
09e25c15000fdd366516b8de9145910da8520054
-
SHA256
5c7dd91a2baea372d6546d1a4985d3ec34b3260f58907113d5a4f6a5a5a5a4f2
-
SHA512
d4977a6c841ea7ea1a4851038975e9eaea2b9454a68708b9247ae63c44b02e165b1cac28d181b75ab50cdfd5b65251b81e5074ca3a79739378b464fd7e97c4de
-
SSDEEP
6144:rmndAJXAY58O+Q3Ux9h6E9UQppEvVv8BI4TRm8jBg0xpbQdEkRj8hdHsMv/isB:Y0AYf3s6DvaBI4TlBg4pbOEcY/Dv6sB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59634db4348765c088ad8ef293879ea0
Files
-
59634db4348765c088ad8ef293879ea0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ