Static task
static1
Behavioral task
behavioral1
Sample
5e42538b3d7ea3a8428d5b1fef3f31cd7f14c240046d386d568a0b5c5797d6e9.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5e42538b3d7ea3a8428d5b1fef3f31cd7f14c240046d386d568a0b5c5797d6e9.exe
Resource
win10v2004-20230915-en
General
-
Target
5e42538b3d7ea3a8428d5b1fef3f31cd7f14c240046d386d568a0b5c5797d6e9
-
Size
64KB
-
MD5
1039115c3265011a0d915dc19ee75106
-
SHA1
f6f2a6410e3aedd6036e222079fe75ec021710b5
-
SHA256
5e42538b3d7ea3a8428d5b1fef3f31cd7f14c240046d386d568a0b5c5797d6e9
-
SHA512
923ec50a716cc3f6dd6b4f48c670442df7b5be22f2c52eb88e33a8928724ff858e0a4bd69336c06c9137c1b1169c3d419a8840122c44bd8331cf10ebb70e8ec3
-
SSDEEP
768:qUTN/9j0D5xq5Y4EGLIIAII4IOpn4MqWNU+K74FV2pRpWbSDHCHFAHYHoAtwS1rf:HJ/9SQ5VeMqqU+NV23S24H1hrNK+ntL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e42538b3d7ea3a8428d5b1fef3f31cd7f14c240046d386d568a0b5c5797d6e9
Files
-
5e42538b3d7ea3a8428d5b1fef3f31cd7f14c240046d386d568a0b5c5797d6e9.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ