Static task
static1
Behavioral task
behavioral1
Sample
5326da87297a0368284ee5cb5244dbe31d3c5d6a71b3bf59c982d2959693f9f5.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5326da87297a0368284ee5cb5244dbe31d3c5d6a71b3bf59c982d2959693f9f5.exe
Resource
win10v2004-20230915-en
General
-
Target
5326da87297a0368284ee5cb5244dbe31d3c5d6a71b3bf59c982d2959693f9f5
-
Size
3.5MB
-
MD5
49a5dbc6de6cac5f9b2457feda8d6320
-
SHA1
1cf3c3863861c1b76a0552d9d69aa2f0f9df55fd
-
SHA256
5326da87297a0368284ee5cb5244dbe31d3c5d6a71b3bf59c982d2959693f9f5
-
SHA512
1546a000687f911277dbce9ec0a0db10324a5b53b5245349f0ba594d5e7276eb28585c62e423c6c0be781380d2e67570827617e74c5810b042dd755c2a9942bc
-
SSDEEP
98304:x7ukY9dgWS9PdVEAE4VWBIUlKoPiAvl3dYr:Uoq14VWBIUI+tFq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5326da87297a0368284ee5cb5244dbe31d3c5d6a71b3bf59c982d2959693f9f5
Files
-
5326da87297a0368284ee5cb5244dbe31d3c5d6a71b3bf59c982d2959693f9f5.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.9MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 104KB - Virtual size: 104KB
IMAGE_SCN_MEM_READ