Static task
static1
Behavioral task
behavioral1
Sample
523d97331fcef84ff767dbb01836766d8b1be9bbeb3d76e9fda3a02ad46fd976.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
523d97331fcef84ff767dbb01836766d8b1be9bbeb3d76e9fda3a02ad46fd976.exe
Resource
win10v2004-20231222-en
General
-
Target
523d97331fcef84ff767dbb01836766d8b1be9bbeb3d76e9fda3a02ad46fd976.exe
-
Size
1.2MB
-
MD5
a1dc2aee881f067dc5410722188828aa
-
SHA1
e30f9cec20bc2fcc4c578302f042f7d49401d606
-
SHA256
467851acb8e16f288fbebf55f3ce6b4ad463945095c08f4b6b6c46421fe94445
-
SHA512
c42e36cbf2d77246f73416ee79910c5d166d3b8b21f6b35eaef1cabf7263ad0f2373a6da64ec9e59ca61b3fc364a9f190264537c7564d0f811d885d6a2fbd5b9
-
SSDEEP
3072:YBNGfNmf3grGrY9WT97gilKwJiOPmLgXQ0wllT3WifOm2SndWTQ50rxsF5SQmgTY:AA1mf3g6rY60iK6XQ0uNDsSndIsi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 523d97331fcef84ff767dbb01836766d8b1be9bbeb3d76e9fda3a02ad46fd976.exe
Files
-
523d97331fcef84ff767dbb01836766d8b1be9bbeb3d76e9fda3a02ad46fd976.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_SYSTEM
Sections
.text Size: 223KB - Virtual size: 222KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 66.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 941KB - Virtual size: 941KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ