Static task
static1
Behavioral task
behavioral1
Sample
591525b36c92f92925a8bc66b0351dec0395cb3f6106d770cb89c1d2e1a6d198.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
591525b36c92f92925a8bc66b0351dec0395cb3f6106d770cb89c1d2e1a6d198.exe
Resource
win10v2004-20231215-en
General
-
Target
591525b36c92f92925a8bc66b0351dec0395cb3f6106d770cb89c1d2e1a6d198.exe
-
Size
52KB
-
MD5
10b63691ebe1f900d53eab9244a18283
-
SHA1
49ba8fb1e5c60422aa49c6e5f729bbb148caef30
-
SHA256
591525b36c92f92925a8bc66b0351dec0395cb3f6106d770cb89c1d2e1a6d198
-
SHA512
7af41c2ee1a9fef65b7e8b3d1c72b67d19cc417bcceb1998c3684bafeace40374243a1180bb790ef795b22e623e8aa7e0ea5144d8b722e7752e6ca75cba7b08a
-
SSDEEP
768:E3nPyEiyHR2gjToWrTslz0HVJ3/7kdrbdvUfbN8Sx8kpCihIgS7V3yaNRpzX4gwE:+oQ4lvUfbNVGGCihIgS7V359I8ZKj0j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 591525b36c92f92925a8bc66b0351dec0395cb3f6106d770cb89c1d2e1a6d198.exe
Files
-
591525b36c92f92925a8bc66b0351dec0395cb3f6106d770cb89c1d2e1a6d198.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ