Static task
static1
Behavioral task
behavioral1
Sample
587ea56db385264f06df4c9ff10cac5c04387454dd9138db78f6dc30dbda31d0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
587ea56db385264f06df4c9ff10cac5c04387454dd9138db78f6dc30dbda31d0.exe
Resource
win10v2004-20231215-en
General
-
Target
587ea56db385264f06df4c9ff10cac5c04387454dd9138db78f6dc30dbda31d0
-
Size
3.7MB
-
MD5
6ebf9c34d0e374eafc40e12a83418290
-
SHA1
e128d9645ca058c8f08847e4ba36abc841e3d8f8
-
SHA256
587ea56db385264f06df4c9ff10cac5c04387454dd9138db78f6dc30dbda31d0
-
SHA512
a111646d5684f0a820b5b5690afe461c3b49cc5faf9a17ee71249bfd488162799f2d77cadce0bd28efc5e6cdcd04d45328c47bda4a0de7fbdc1ac3c385eb2ec0
-
SSDEEP
49152:nIUMi/PDtYLkWEmRVYG1HjU0QC0v3gQN62AG317kPX75oad1:IIPDXWEmRY0QC0vgu7kPXyS1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 587ea56db385264f06df4c9ff10cac5c04387454dd9138db78f6dc30dbda31d0
Files
-
587ea56db385264f06df4c9ff10cac5c04387454dd9138db78f6dc30dbda31d0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
��0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dvvehzv Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.GA�1 Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE