Static task
static1
Behavioral task
behavioral1
Sample
5f89e571aaa3b8b2832069ea192250fad7fa05ee0e15caaa1991425346ab5489.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5f89e571aaa3b8b2832069ea192250fad7fa05ee0e15caaa1991425346ab5489.exe
Resource
win10v2004-20230915-en
General
-
Target
5f89e571aaa3b8b2832069ea192250fad7fa05ee0e15caaa1991425346ab5489
-
Size
1.8MB
-
MD5
b0f127247176753ddddc798683f8c6cd
-
SHA1
77c6bb25b2fc13739fb89d684e0213092d7dd8c6
-
SHA256
5f89e571aaa3b8b2832069ea192250fad7fa05ee0e15caaa1991425346ab5489
-
SHA512
d8534b1b8d148d4902b2701d8684acfbfbe0b6118c99aae2bc7554c1e32e1fcfb68e0389a995f7a71f28d37e25367987716ebecb269e0d6b3f0e961b04c86539
-
SSDEEP
49152:I+ykahMRzBOUmUys5HQ1pBiHAqmvSS2bKpLgx9Px3l:qka2zBOMi+HAqmvS1bKpePx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f89e571aaa3b8b2832069ea192250fad7fa05ee0e15caaa1991425346ab5489
Files
-
5f89e571aaa3b8b2832069ea192250fad7fa05ee0e15caaa1991425346ab5489.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 987KB
IMAGE_SCN_MEM_READ
VProtect Size: 240KB - Virtual size: 240KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ