Static task
static1
Behavioral task
behavioral1
Sample
5f8f16850a9108bf59f75399047c8faa3645214c6b54bc8b1409f47193f1dd7f.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5f8f16850a9108bf59f75399047c8faa3645214c6b54bc8b1409f47193f1dd7f.exe
Resource
win10v2004-20230915-en
General
-
Target
5f8f16850a9108bf59f75399047c8faa3645214c6b54bc8b1409f47193f1dd7f
-
Size
79KB
-
MD5
cd934f185f141dac05455ca6c7d030bb
-
SHA1
b2d3a8ecca47cc6f8cf7e7772c9a121f187158e1
-
SHA256
5f8f16850a9108bf59f75399047c8faa3645214c6b54bc8b1409f47193f1dd7f
-
SHA512
bb20f8cbd3637260388ff566b2edd6e113fa8c6ff4cc23adb62b265135fea9f4ee5f2025a21bddf5dde4f4742a867e069479a6237f8d719ae7e469de09e1ed37
-
SSDEEP
1536:RshfSWHHNvoLqNwDDGw02eQmh0HjWOwmOJA:GhfxHNIreQm+HirmOJA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f8f16850a9108bf59f75399047c8faa3645214c6b54bc8b1409f47193f1dd7f
Files
-
5f8f16850a9108bf59f75399047c8faa3645214c6b54bc8b1409f47193f1dd7f.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PEC Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE