Static task
static1
Behavioral task
behavioral1
Sample
59f0820e1dba93f32143edd3016243e0N.exe
Resource
win7-20240708-en
General
-
Target
59f0820e1dba93f32143edd3016243e0N.exe
-
Size
53KB
-
MD5
59f0820e1dba93f32143edd3016243e0
-
SHA1
29ca84156e31cf22dff3784e0ea8fe16beacb5ac
-
SHA256
d620b15623bb352588dbe7e71ed15be7018750380cf5670c0acfec5612b28d9c
-
SHA512
5378d3b9a667f59c18d8544269441f5a0f331e1730c6fa6038b8508d58bf74d7a8c33c60822d1621fb932f265070776224c2f1304f8b852df9f7a3acfd28929f
-
SSDEEP
1536:TlnBzGPEdPJpUI4QP4BDK3XmbPfKJ97ifa:JnBGPUMQwBDamb3a7iy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 59f0820e1dba93f32143edd3016243e0N.exe
Files
-
59f0820e1dba93f32143edd3016243e0N.exe.exe windows:5 windows x86 arch:x86
0387d7197769bd3cd788524003bf2efa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
.MPRESS1 Size: 44KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE