Static task
static1
Behavioral task
behavioral1
Sample
5e96ab284ae29622af374ba1b15ff7fda485288908a62c75bce99c6371015750.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5e96ab284ae29622af374ba1b15ff7fda485288908a62c75bce99c6371015750.exe
Resource
win10v2004-20230915-en
General
-
Target
5e96ab284ae29622af374ba1b15ff7fda485288908a62c75bce99c6371015750
-
Size
3.5MB
-
MD5
260ba6242dc6aa8c35c0cc5cf08be9f2
-
SHA1
351c254cabecc30f3a14a4f2b9768889365aab6c
-
SHA256
5e96ab284ae29622af374ba1b15ff7fda485288908a62c75bce99c6371015750
-
SHA512
d414d8fb22165d4f87bbe3f5730991f80963df35cff3871cfc69944529eb3c601e7df13cabce0eb1d95204d2eb953c44ff6f0cfe1a4bca1f98aa002f638b89e3
-
SSDEEP
98304:bBHVWUq5OalUvC4PVl1JI/POm7jvT3dYr:n5qQDC4H1Jjm7jvzq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e96ab284ae29622af374ba1b15ff7fda485288908a62c75bce99c6371015750
Files
-
5e96ab284ae29622af374ba1b15ff7fda485288908a62c75bce99c6371015750.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.8MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ