Static task
static1
Behavioral task
behavioral1
Sample
c59238dd35ad842f5113fc180c7ae3fc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c59238dd35ad842f5113fc180c7ae3fc.exe
Resource
win10v2004-20240226-en
General
-
Target
c59238dd35ad842f5113fc180c7ae3fc
-
Size
2KB
-
MD5
c59238dd35ad842f5113fc180c7ae3fc
-
SHA1
cc58ef678e037f553d0d6ec9c22743d50d7304c7
-
SHA256
e60696f1a1c91889c807c31445ce54c3b5dcea97dcfe7dce78f8af3bae00333f
-
SHA512
c3ef21bc13422a5d6652e31aacc00e37572494f260eb7a39cadd66ba29c1fe004d4cdac4707d8fbc6d68be93faeecae2e1e30d8ba6c7a08b05ae5b5338756ed1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c59238dd35ad842f5113fc180c7ae3fc
Files
-
c59238dd35ad842f5113fc180c7ae3fc.exe windows:4 windows x86 arch:x86
e616c9e84d2b3753caf6b0504178e0c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetProcAddress
LoadLibraryA
lstrcpyA
CloseHandle
user32
wvsprintfA
Sections
.text Size: 512B - Virtual size: 346B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 238B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE