Static task
static1
Behavioral task
behavioral1
Sample
0359d472c709a2818d98bd405db26e44c76a18233b1b2f2a5a688f6c9e7c3503.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0359d472c709a2818d98bd405db26e44c76a18233b1b2f2a5a688f6c9e7c3503.exe
Resource
win10v2004-20240226-en
General
-
Target
0359d472c709a2818d98bd405db26e44c76a18233b1b2f2a5a688f6c9e7c3503
-
Size
5.7MB
-
MD5
a9a6952ef9ec0898ad38ba29f049533b
-
SHA1
92563c372f3974138db537593c8356928ac2c5a6
-
SHA256
0359d472c709a2818d98bd405db26e44c76a18233b1b2f2a5a688f6c9e7c3503
-
SHA512
c1c214b48b48a9853b5a97c236888df7266f4c819c196a7d25d18b89d2716eb271654ff2c7a0f15a81a4a734592a32c09035e90f84952383277cd5a8fefa6264
-
SSDEEP
49152:QKiJFsmOoPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPP0Pa:yJFBr51r5D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0359d472c709a2818d98bd405db26e44c76a18233b1b2f2a5a688f6c9e7c3503
Files
-
0359d472c709a2818d98bd405db26e44c76a18233b1b2f2a5a688f6c9e7c3503.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 672KB - Virtual size: 672KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE