Static task
static1
Behavioral task
behavioral1
Sample
5de65ff14f96f26527907c26c368b91e1664a0db48bbc36a4158796a5d3b5ae1.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5de65ff14f96f26527907c26c368b91e1664a0db48bbc36a4158796a5d3b5ae1.exe
Resource
win10v2004-20230703-en
General
-
Target
5de65ff14f96f26527907c26c368b91e1664a0db48bbc36a4158796a5d3b5ae1
-
Size
986KB
-
MD5
c495a778c553b7ec0c3f6e43a8567315
-
SHA1
3e827e68976dad51987bf7952440ef9c59211985
-
SHA256
5de65ff14f96f26527907c26c368b91e1664a0db48bbc36a4158796a5d3b5ae1
-
SHA512
f8053d772c6a3b089f609d5f3d6eac41633f694a9e4551580f166f3a0eae3467b199f4bc4ad806230c68f01efc0e0c3533fe547090c0974c07034b172c4b029c
-
SSDEEP
24576:SlxlphIvaLQJyh7b34U3ytdv2w2n2LhfjTC8MdMre2V:SlxjkUQJk4U0duwioNAqr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5de65ff14f96f26527907c26c368b91e1664a0db48bbc36a4158796a5d3b5ae1
Files
-
5de65ff14f96f26527907c26c368b91e1664a0db48bbc36a4158796a5d3b5ae1.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 81KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 370KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 166KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 345KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE