Static task
static1
Behavioral task
behavioral1
Sample
5ff17a7593d718af4685e5dea6365cd0.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
5ff17a7593d718af4685e5dea6365cd0.exe
Resource
win10v2004-20230220-en
General
-
Target
5ff17a7593d718af4685e5dea6365cd0.exe
-
Size
8KB
-
MD5
5ff17a7593d718af4685e5dea6365cd0
-
SHA1
d185f15554ea8e60453811a5d5cf08bf9a85ac77
-
SHA256
806e6f539434330d0167f8f4a0e27c45439e5e2c0c1ef7b8785c3cb1f04514bc
-
SHA512
d34aab5e89310181c0c3a899f7daab0d6467509b2623ff0e57deefa3b3871679c07fed69ecf4227393bd40e5396d6e54201349fe270d39e8121b63e3fd5e8e6f
-
SSDEEP
96:NTqjspff33Pf39f33Pf33Pf3X3X3ff33Pf3ff33Pf33Pf33P/vHf33Pf3MmjpaUT:EjsVnVnnnnnnnnnnXHbp/Km
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ff17a7593d718af4685e5dea6365cd0.exe
Files
-
5ff17a7593d718af4685e5dea6365cd0.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 689KB - Virtual size: 689KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 4.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ