Static task
static1
Behavioral task
behavioral1
Sample
5c9c60e93036b7203cb364e3c664d57adcf2d6dc896af7321709ecf8f92009ff.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5c9c60e93036b7203cb364e3c664d57adcf2d6dc896af7321709ecf8f92009ff.exe
Resource
win10v2004-20230915-en
General
-
Target
5c9c60e93036b7203cb364e3c664d57adcf2d6dc896af7321709ecf8f92009ff
-
Size
7.2MB
-
MD5
07946cceadc5aaed77a62e450f5dcdb1
-
SHA1
97348cffca79bce62ae4f25a3b545f79c743d0d6
-
SHA256
5c9c60e93036b7203cb364e3c664d57adcf2d6dc896af7321709ecf8f92009ff
-
SHA512
01b2343b761a6d34928db3a298f42de8037affbf26ac9f7f361be8d63f60b86fe975862bb48933a9ddbbd71d6c47c54f76c30d2e7219b87d52320eb22cdc1b9a
-
SSDEEP
196608:9MB5JDZ/sPDPt9M87WXOmo/YOmayKe7G5xrdAaE7IA:9MB7ZkP7W+moYOmjKeyv5AP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c9c60e93036b7203cb364e3c664d57adcf2d6dc896af7321709ecf8f92009ff
Files
-
5c9c60e93036b7203cb364e3c664d57adcf2d6dc896af7321709ecf8f92009ff.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 364KB - Virtual size: 811KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 2.2MB - Virtual size: 7.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 28KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.winlice Size: - Virtual size: 6.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ