Static task
static1
Behavioral task
behavioral1
Sample
d568d6e24a62a5c402fec01c2f5f4619.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d568d6e24a62a5c402fec01c2f5f4619.exe
Resource
win10v2004-20231215-en
General
-
Target
d568d6e24a62a5c402fec01c2f5f4619
-
Size
341KB
-
MD5
d568d6e24a62a5c402fec01c2f5f4619
-
SHA1
ce3cdbd82334516b4257453bca77c343b505c75d
-
SHA256
ec519f7ffb4720999ed084fb3a2132f81816eb4f853983cfddafc6de1bf3ca55
-
SHA512
a915575b9c55816f2b611b6de82d8b7d9201b08e74bd047dde771968facf44fe63515b43c7a0c9e73246b1f2ef5545c8a4a4d8eb836695af2cf9e74440f3c639
-
SSDEEP
6144:U5UPL/6WV8Sc1yiPm437RxtSRiREOxdi9LkJYtKYqtPL9ACTLwERrHKn3zP1d1l:f/ZD2402OHy4FtPL9/wae3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d568d6e24a62a5c402fec01c2f5f4619
Files
-
d568d6e24a62a5c402fec01c2f5f4619.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 191KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 147KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Polyene Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE