Static task
static1
Behavioral task
behavioral1
Sample
59e6961ccfa076a67c9a1b9641a614c6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
59e6961ccfa076a67c9a1b9641a614c6.exe
Resource
win10v2004-20231222-en
General
-
Target
59e6961ccfa076a67c9a1b9641a614c6
-
Size
263KB
-
MD5
59e6961ccfa076a67c9a1b9641a614c6
-
SHA1
d2380223a8ff7d76e79fcb13ab2194daece648d9
-
SHA256
670e2816218f0ada9e2061a0baeb69e581c9e90d05f4e696a6c6641add44ba4e
-
SHA512
a6e5481d75f3dd71619c49632ae9545e4b12073a8f3d4feb83f3e1c893b91244f2e52dd0e2769c6179be0da08d0686e77646ad603a2bcb20d05c0f1f699aff20
-
SSDEEP
6144:ehRTB6mP9jJY+5Izmz6Oa2uiEwBN0aYpsJWHzOyyG0WgrlR:6TB6mP9dY/zmGOa2zN0XpsQF0fv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59e6961ccfa076a67c9a1b9641a614c6
Files
-
59e6961ccfa076a67c9a1b9641a614c6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 6KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ