Static task
static1
Behavioral task
behavioral1
Sample
a587c3489a3153334d03762e6d99a263aac2ea75bb8783552a115e62f418cac6.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
a587c3489a3153334d03762e6d99a263aac2ea75bb8783552a115e62f418cac6.exe
Resource
win10v2004-20240226-en
General
-
Target
a587c3489a3153334d03762e6d99a263aac2ea75bb8783552a115e62f418cac6
-
Size
312KB
-
MD5
2b677287d5e68e9b802931746e3fca9c
-
SHA1
40992bd9511f3e52621c5b7e4653fef39e1d829e
-
SHA256
a587c3489a3153334d03762e6d99a263aac2ea75bb8783552a115e62f418cac6
-
SHA512
fc5990a5674d16964624a017b9e1351cb53995aec084724e532b5848944cbda0f063b9b03af378b87189c15b0bb59d1f60a106806c6b59ce636360d912f33f72
-
SSDEEP
3072:zYUb5QoJ4g+3WiuGt+Zj6Iz1ZdW4SrO7FSVpEzJ6b7O/RyXpv64G:zYgTh6SZI4z7FSVpw6b7OZyX164G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a587c3489a3153334d03762e6d99a263aac2ea75bb8783552a115e62f418cac6
Files
-
a587c3489a3153334d03762e6d99a263aac2ea75bb8783552a115e62f418cac6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pdata Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 617B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ