Static task
static1
Behavioral task
behavioral1
Sample
a575a3be84483ef821d64cfee85a43dbcc2224fc80cbffe161b7b2f4a0936409.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a575a3be84483ef821d64cfee85a43dbcc2224fc80cbffe161b7b2f4a0936409.exe
Resource
win10v2004-20240508-en
General
-
Target
a575a3be84483ef821d64cfee85a43dbcc2224fc80cbffe161b7b2f4a0936409
-
Size
896KB
-
MD5
5e9a197d4b2ed3c51f0e0486d1e13da8
-
SHA1
eeb7cc55ac653e8907cc1541afb0290a5343a2b8
-
SHA256
a575a3be84483ef821d64cfee85a43dbcc2224fc80cbffe161b7b2f4a0936409
-
SHA512
cceb32f663cc4389a7f3f8ee0025bf1aee02032023d3c456a65ac90fa7f19eda48f623c5a29ef626bb363d16f904f81efd728d912be5a9cd3b0e188ff034e421
-
SSDEEP
12288:FXqfVmI8Oj8inIxRxeJi+H4oaCOjHvxEs1mkXDVw1fkh4WHmp1dDBjVDa/ZSTK:Fa9mViIxRtG4oalrKyXa1+m7D3a/ZSTK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a575a3be84483ef821d64cfee85a43dbcc2224fc80cbffe161b7b2f4a0936409
Files
-
a575a3be84483ef821d64cfee85a43dbcc2224fc80cbffe161b7b2f4a0936409.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 633KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 9KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kakxcjb Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ