Static task
static1
Behavioral task
behavioral1
Sample
5030a5122e429c35160d1e831f758983c7769d5cd084f2150c3835710187debb.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5030a5122e429c35160d1e831f758983c7769d5cd084f2150c3835710187debb.exe
Resource
win10v2004-20230703-en
General
-
Target
5030a5122e429c35160d1e831f758983c7769d5cd084f2150c3835710187debb
-
Size
4.0MB
-
MD5
2b376409029c1074f057eed11c5d60cb
-
SHA1
17799ccc96dac385ce5525fcd93ed5b65e757204
-
SHA256
5030a5122e429c35160d1e831f758983c7769d5cd084f2150c3835710187debb
-
SHA512
275b24a1a6cacb1f09fe742380e90ab7516deb0e581d4fbf7e93f051ff6f25d7e5dfd1f1e716c6a232a45c00580d1920e1ee1079102a94b50971f4d36e10ff18
-
SSDEEP
98304:0prRy0lG4bxFmtORXM6nJMk01IfVsTrqUCUCUbv:F7tOxMUJh01Itsq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5030a5122e429c35160d1e831f758983c7769d5cd084f2150c3835710187debb
Files
-
5030a5122e429c35160d1e831f758983c7769d5cd084f2150c3835710187debb.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.9MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE