Static task
static1
Behavioral task
behavioral1
Sample
58d05d10a6559891d8d2db1968556b86f3210a6a9dcb31806fac8774d4a69593.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
58d05d10a6559891d8d2db1968556b86f3210a6a9dcb31806fac8774d4a69593.exe
Resource
win10v2004-20240611-en
General
-
Target
58d05d10a6559891d8d2db1968556b86f3210a6a9dcb31806fac8774d4a69593
-
Size
965KB
-
MD5
dada07972c7b34a176d044a59ce3ff8e
-
SHA1
7af4747aa6f7e99300c6d5721c0cf5345e69021b
-
SHA256
58d05d10a6559891d8d2db1968556b86f3210a6a9dcb31806fac8774d4a69593
-
SHA512
2eb2d60fa6b76a33e62e394a771d212f1c9930dcd369b3afd630df241dcd9cb6aaec8db3bdeec6f45403141a868beaa0f5781744ce3c83b03157d9229498da81
-
SSDEEP
24576:d3lzRacgLO2bpTGAlIbfZLJLIJ/gyUrYKbQICSyyeLRvF:LRacgX4AGBLJsdgWKbCSYF9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58d05d10a6559891d8d2db1968556b86f3210a6a9dcb31806fac8774d4a69593
Files
-
58d05d10a6559891d8d2db1968556b86f3210a6a9dcb31806fac8774d4a69593.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 757KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 17KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_TEXT_HA Size: 38KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE