Static task
static1
Behavioral task
behavioral1
Sample
59ebb8a5f57a6de743656b79b132680f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
59ebb8a5f57a6de743656b79b132680f.exe
Resource
win10v2004-20231222-en
General
-
Target
59ebb8a5f57a6de743656b79b132680f
-
Size
279KB
-
MD5
59ebb8a5f57a6de743656b79b132680f
-
SHA1
b83cb67b42fd9760165097809ac31e157b498687
-
SHA256
62b814b92f1d4f1ae38c8029ebf32c1d47f8f8cb75d9b850c4d176fa18cda3ca
-
SHA512
4dee14b64b1017296c03feaedf34c806874f283b2db329bbb2705f4bfd616f2066a52d6624ee1558ae1ddf9d9bf12d3910623c91533a6bd068c3107ef35edbe4
-
SSDEEP
6144:wXsjLkaDkVOHxEoi0VDNg4VqAxXU61/qvG1UzxtlQb6zoXCOeZLQH:wXsjLkV76VRTVjxXU61/P1UvMXXC7Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59ebb8a5f57a6de743656b79b132680f
Files
-
59ebb8a5f57a6de743656b79b132680f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
yqwjihi0 Size: - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yqwjihi1 Size: 278KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yqwjihi2 Size: 309B - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE