Static task
static1
Behavioral task
behavioral1
Sample
1d89524adcb492f1cdd52ae25702de56.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1d89524adcb492f1cdd52ae25702de56.exe
Resource
win10v2004-20240611-en
General
-
Target
1d89524adcb492f1cdd52ae25702de56.bin
-
Size
43KB
-
MD5
1d89524adcb492f1cdd52ae25702de56
-
SHA1
d19d0d19a9207614c26d900cd06c54b8394b38c1
-
SHA256
d8b5b4931299b91fd83687ef49e635101ed8efe9b10ae75f0dc32856445ee9fe
-
SHA512
bb13d6139c7386eb1298af4ddabac1a77c9a8b1125c41f8fb46584a58284fb4170d4996159adf9cbe8181855095e288beae9292938f3b80244fe139e68df7dfd
-
SSDEEP
768:Gn/jUC4TLPMxBHTAtMBLJBRNilIkrTC1bVkqDdUlxk4kuGhpfCX0u8JMeA3fFW:sLUCumHMtET62eC1baqF4ZGvU0u9e69
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d89524adcb492f1cdd52ae25702de56.bin
Files
-
1d89524adcb492f1cdd52ae25702de56.bin.exe windows:5 windows x86 arch:x86
b39e7c7774b148048fb93cecada0ecce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
FlushFileBuffers
user32
GetClassNameW
Sections
.uruhcp Size: 36KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mtkjcb Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rip Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ