Static task
static1
Behavioral task
behavioral1
Sample
c0534dd605f282d5c8d75726f70e1a2549610ac5be635bba7b944ac7647f842f.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c0534dd605f282d5c8d75726f70e1a2549610ac5be635bba7b944ac7647f842f.exe
Resource
win10v2004-20240802-en
General
-
Target
c0534dd605f282d5c8d75726f70e1a2549610ac5be635bba7b944ac7647f842f
-
Size
52KB
-
MD5
a66bf4c3b94ece75ca268e8053991a73
-
SHA1
7811992323eb7473a0e77dee69138bfb9c3a0039
-
SHA256
c0534dd605f282d5c8d75726f70e1a2549610ac5be635bba7b944ac7647f842f
-
SHA512
29a2c178a0a40603135f6b1cadc736c7fec3d45a86e71ccfa730a0a21dfda5134bd999d86132f58602c3ad623956296ec7b91ee88c0dfa915c82690ee2cec490
-
SSDEEP
768:og9nVhIojnT92TK5WnOX8RgU+6s9ZNje/7TjOvHOi388yE/1H5F/syrMABvKWe:V9ndR2m50OX8Rrs9ZNjVvUAFrMAdKZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0534dd605f282d5c8d75726f70e1a2549610ac5be635bba7b944ac7647f842f
Files
-
c0534dd605f282d5c8d75726f70e1a2549610ac5be635bba7b944ac7647f842f.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ