Static task
static1
Behavioral task
behavioral1
Sample
586fac3b6e4d4f91ba96b03f52de8780775eeda91d1e684a224699289908b716.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
586fac3b6e4d4f91ba96b03f52de8780775eeda91d1e684a224699289908b716.exe
Resource
win10v2004-20240226-en
General
-
Target
586fac3b6e4d4f91ba96b03f52de8780775eeda91d1e684a224699289908b716
-
Size
14KB
-
MD5
a5d7e95cb8cd0690c0d398c2c3854e89
-
SHA1
c157acdf7af183a2c9b59b380446a7845945c1e2
-
SHA256
586fac3b6e4d4f91ba96b03f52de8780775eeda91d1e684a224699289908b716
-
SHA512
681a6ab5d58d26175976a802204e0467bebe061e105a2c8e349cbc465a91e6b74e83c61dabdb6b31f571687b30aa99cb3f40c7cab27887a153a75382e7eb05a3
-
SSDEEP
384:BI3J9ElY96/ffTUaA1oZDzo7or/NPDE045H:xdfPhzo7e/hA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 586fac3b6e4d4f91ba96b03f52de8780775eeda91d1e684a224699289908b716
Files
-
586fac3b6e4d4f91ba96b03f52de8780775eeda91d1e684a224699289908b716.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ