Static task
static1
Behavioral task
behavioral1
Sample
659436e84d19a5b5ed002e94bd58193d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
659436e84d19a5b5ed002e94bd58193d.exe
Resource
win10v2004-20231215-en
General
-
Target
659436e84d19a5b5ed002e94bd58193d
-
Size
385KB
-
MD5
659436e84d19a5b5ed002e94bd58193d
-
SHA1
5407acf2f5b86569a7d05e7d5531e1835d9a2d78
-
SHA256
40c0f7126b0580906caab0964e053db54ed53581abafe374ac3de7cd0e048ebe
-
SHA512
487199efc28660242526946da4e3b6f9a9cb9f4561275fde0a2343ac00a6d1426db252be2e36b2da45e826bc486259a4b982ca263f210866b35e553e6a691218
-
SSDEEP
12288:PLm6YuIjkG36ktU0i+fb8UgWQy/opkBVBarQCXE+BxcK9UMBvB:TmxcG3vt3iQ8C7/UBvB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 659436e84d19a5b5ed002e94bd58193d
Files
-
659436e84d19a5b5ed002e94bd58193d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ