Static task
static1
Behavioral task
behavioral1
Sample
059c784792715d5213d3f980aa32fb8f6c3ae820e6e5b35dda7791f8ffadf642.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
059c784792715d5213d3f980aa32fb8f6c3ae820e6e5b35dda7791f8ffadf642.exe
Resource
win10v2004-20240508-en
General
-
Target
059c784792715d5213d3f980aa32fb8f6c3ae820e6e5b35dda7791f8ffadf642
-
Size
14KB
-
MD5
f237ed8d0ccee98a3daa44ce2bde40c3
-
SHA1
60dfb135e8971966d9ed01fff7af3d6925e9ef80
-
SHA256
059c784792715d5213d3f980aa32fb8f6c3ae820e6e5b35dda7791f8ffadf642
-
SHA512
eaec9418aef0a29558096c9e65ae04f2639ab75f5653d70c4f4a2d5eb1b0683ead639fc521960552ea2f4f3287f1039bbd292fe1cd766f5be45b2dc8b675819f
-
SSDEEP
384:FfWTz3AbPVWWWWWWWWWWWWWWCelKdiLFARDE045Hqqq7:FuTbAbVWWWWWWWWWWWWWWCelK8yhA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 059c784792715d5213d3f980aa32fb8f6c3ae820e6e5b35dda7791f8ffadf642
Files
-
059c784792715d5213d3f980aa32fb8f6c3ae820e6e5b35dda7791f8ffadf642.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ