Static task
static1
Behavioral task
behavioral1
Sample
5857b3931634147a84d0be6e740e75b9.exe
Resource
win7-20230220-en
General
-
Target
5857b3931634147a84d0be6e740e75b9.exe
-
Size
303KB
-
MD5
5857b3931634147a84d0be6e740e75b9
-
SHA1
0dd7a7d801fb2592c31a3f4e28e690b0cd90aba4
-
SHA256
5ddf1289ab0bc93ce442ae80a0ba8b4c25d4dfc78fff12da0f41a691c351aa32
-
SHA512
39f2b8ad1073ced6a66d5d8c65927bb88360a1d69fd393ae9f0e4af95c1fc27b402834217de64f84663bfc2fb3d37d3d12a670357a135dd8512c4b88c1262511
-
SSDEEP
6144:PLwZuR5PhoumebQ9bFyXDa9C02TUQ2qeli+Znwo8wJlspsWl8cCE0Y/lxur:kZuR3NmebQ9b2D372qs78wlK+Y/lxur
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5857b3931634147a84d0be6e740e75b9.exe
Files
-
5857b3931634147a84d0be6e740e75b9.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 301KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ