Static task
static1
Behavioral task
behavioral1
Sample
d5a75973a7a63d5ff9bdd7ce19e6db67556b062a2b8927d615a426c1f4492666.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d5a75973a7a63d5ff9bdd7ce19e6db67556b062a2b8927d615a426c1f4492666.exe
Resource
win10v2004-20230221-en
General
-
Target
d5a75973a7a63d5ff9bdd7ce19e6db67556b062a2b8927d615a426c1f4492666
-
Size
217KB
-
MD5
9323d76d28d0a785fdd95301835c3d95
-
SHA1
4e76eb8afc5bb0565b6ca2780cd604b2852e978f
-
SHA256
d5a75973a7a63d5ff9bdd7ce19e6db67556b062a2b8927d615a426c1f4492666
-
SHA512
788547ddab99ec136b96b887873791eeb0bcb66bf75e75323e08642748d7b601a7030a36c3afdd37731e4c6abf630644bd4e2a563a4d94a5ea16ae28d746749e
-
SSDEEP
6144:+dW7C0sNMbsvsqAZmDv1s8KQ8i3P71qvwFSQ:+sCHCx/ZmL1lKKAQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5a75973a7a63d5ff9bdd7ce19e6db67556b062a2b8927d615a426c1f4492666
Files
-
d5a75973a7a63d5ff9bdd7ce19e6db67556b062a2b8927d615a426c1f4492666.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jgd Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE