Static task
static1
Behavioral task
behavioral1
Sample
1686f4c3ad60b03cfe3b064ceddbe212ce9e2030aa3126804446bb9d1d8de020.exe
Resource
win10v2004-20240508-en
General
-
Target
1686f4c3ad60b03cfe3b064ceddbe212ce9e2030aa3126804446bb9d1d8de020
-
Size
2.0MB
-
MD5
59358f6704a41dcee99862134b1a7e8c
-
SHA1
dc9dcd9a410c4c906831221ae35f9e0491942f8e
-
SHA256
1686f4c3ad60b03cfe3b064ceddbe212ce9e2030aa3126804446bb9d1d8de020
-
SHA512
ba5e1ab503013fa1243518a5c801c81a222c8643f490662f33333e33a8bb8ae5feaa13551478ceec28afa7c78fbb61ce6ca8ce1ed6323f3127e0142e4e0dbaa8
-
SSDEEP
49152:7QzHt472DTJtTF+TxMoxc1TU+j+dAzGwlrh:7QzHtZtIuoITsdZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 1686f4c3ad60b03cfe3b064ceddbe212ce9e2030aa3126804446bb9d1d8de020
Files
-
1686f4c3ad60b03cfe3b064ceddbe212ce9e2030aa3126804446bb9d1d8de020.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 541KB - Virtual size: 541KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 64B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ