Static task
static1
Behavioral task
behavioral1
Sample
59e435d149bbdf93dadfda6b4d87a49c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
59e435d149bbdf93dadfda6b4d87a49c.exe
Resource
win10v2004-20231215-en
General
-
Target
59e435d149bbdf93dadfda6b4d87a49c
-
Size
85KB
-
MD5
59e435d149bbdf93dadfda6b4d87a49c
-
SHA1
8e7ea0e8d29c302ce0577aa0d9072fea84e376a3
-
SHA256
e96652072988edd1b81ac24cd5ff8178839e43354dd2cb5c5fb6602fcfd1d641
-
SHA512
30326b900afc24854c495368bd6b4f225d6027044772d85556deb0eb47667b83597824b08b6c4b48a9c5803d7a7d80dfd9ff4e3517ba8d377ba2e0a8dd885ffd
-
SSDEEP
1536:nHcCnNTr0e+DelaCFcxKen/wFnToIfHTR7r5JkNT89mFp0zA+V/R8O:nHcQ0e+Dcen/wtTBfHTR7r5JkNT89mPy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59e435d149bbdf93dadfda6b4d87a49c
Files
-
59e435d149bbdf93dadfda6b4d87a49c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.!rc! Size: - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ