Static task
static1
Behavioral task
behavioral1
Sample
59c60bf0181eb15a9a51d6a64c8631f2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
59c60bf0181eb15a9a51d6a64c8631f2.exe
Resource
win10v2004-20231215-en
General
-
Target
59c60bf0181eb15a9a51d6a64c8631f2
-
Size
111KB
-
MD5
59c60bf0181eb15a9a51d6a64c8631f2
-
SHA1
cddceb72e80e835032aafbdc2cb354fffe91d481
-
SHA256
a23ad157ce26ad0d599cbd8fe05e6dfd238d8a1feda99811dbde2a7af0873b37
-
SHA512
9cb6063338034b765e9ed3efc7836759ac6f511b3a4313b803acdb90b3d1c584acecc43b14e07e8e07900abf85719ba4be7d83381f95855c41ceb1c821b6e626
-
SSDEEP
1536:4BLfCI87X4gShezS/BeJ/6PAFxIWGyJqKhruq5TkypxHBxxVxNFGGUO3Eb9StcPv:48d7fuZfJK9jT3RJY9Stcn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59c60bf0181eb15a9a51d6a64c8631f2
Files
-
59c60bf0181eb15a9a51d6a64c8631f2.exe windows:4 windows x86 arch:x86
0aa23a764dcc691b39bf97ccf16c1747
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__fmode
__set_app_type
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit
kernel32
GetModuleHandleA
GetDriveTypeA
CopyFileA
GetMailslotInfo
BackupRead
WriteProfileSectionA
TlsGetValue
GetStartupInfoA
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ