Static task
static1
Behavioral task
behavioral1
Sample
c59269dbacfcbc33f1ab9596aac9ea0e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c59269dbacfcbc33f1ab9596aac9ea0e.exe
Resource
win10v2004-20240226-en
General
-
Target
c59269dbacfcbc33f1ab9596aac9ea0e
-
Size
30KB
-
MD5
c59269dbacfcbc33f1ab9596aac9ea0e
-
SHA1
af503ddb083591c136e955d9ae63f362466b270d
-
SHA256
01c5c4a06b5d5902a13fbf39594d2e06bb3cff51b2ba060fa8fb66133b82d03f
-
SHA512
6856b646128e9de2d3702b7c9388c1326a90db8faaa92863f4fac1170be74ff01940849f7e7616ad0240d4232fa730212e4a5f73b66f1688b0b926f52d4ead4c
-
SSDEEP
768:EP1T/A0xA6/xkUczasCYnjMuJ97qA2iEd/:EPVY0xAwo3Fj99L27d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c59269dbacfcbc33f1ab9596aac9ea0e
Files
-
c59269dbacfcbc33f1ab9596aac9ea0e.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 20KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE