Static task
static1
Behavioral task
behavioral1
Sample
5fb1068a381b6f79cab8a2c7998bd06c2c1849f4ab20b76c73edb7e48ab5809a.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5fb1068a381b6f79cab8a2c7998bd06c2c1849f4ab20b76c73edb7e48ab5809a.exe
Resource
win10v2004-20230703-en
General
-
Target
5fb1068a381b6f79cab8a2c7998bd06c2c1849f4ab20b76c73edb7e48ab5809a
-
Size
2.7MB
-
MD5
5e6e45d174598c6cf4a176d3ef6f1bdb
-
SHA1
ace04b0d80308e9113a12081a90f06641ae2a723
-
SHA256
5fb1068a381b6f79cab8a2c7998bd06c2c1849f4ab20b76c73edb7e48ab5809a
-
SHA512
5d627b055dd48ebc16749d8e8926fa8c1b19cc3353018f48fcbb843390688edc68217d162fdb0cfd1d80eead43e64b91708325060341212323abe4a5fda2f28f
-
SSDEEP
49152:Osq6qQ/kx87K/xjhmhTrNESENq+A9E7zk1RLHolo/2iE1MG49:awuKKJsJryS+bzMyqh2Mb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fb1068a381b6f79cab8a2c7998bd06c2c1849f4ab20b76c73edb7e48ab5809a
Files
-
5fb1068a381b6f79cab8a2c7998bd06c2c1849f4ab20b76c73edb7e48ab5809a.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
TMbe Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XB9i Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 282KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE