Static task
static1
Behavioral task
behavioral1
Sample
f5869cfa96dfa9f7bc42314b601fefb3cfa28e8a9386602a6fd52659c68ddf38.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f5869cfa96dfa9f7bc42314b601fefb3cfa28e8a9386602a6fd52659c68ddf38.exe
Resource
win10v2004-20230915-en
General
-
Target
f5869cfa96dfa9f7bc42314b601fefb3cfa28e8a9386602a6fd52659c68ddf38
-
Size
4.9MB
-
MD5
4c645a63a2140f8713a1ec8cf819b437
-
SHA1
ca4c005e32ecbecbc62fdcb77afa209f094da17a
-
SHA256
f5869cfa96dfa9f7bc42314b601fefb3cfa28e8a9386602a6fd52659c68ddf38
-
SHA512
28c42ecaf5294aa4c775b762f922ab244e554eb23ed639aa58f7944800b5cf3ec94a2bdbde02a089934f0dc3ae83471e6987f02e2f0714e840794b3b14b38bb7
-
SSDEEP
98304:egAZ4b/DJyp9oe3QjOryoe9ptWwGAAxnrqS9d6CrFoAZNFBkxYN7nChxclM1y2:Nrb/0o/jOXeJtGAenrqMkCxoKN7ChxcO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5869cfa96dfa9f7bc42314b601fefb3cfa28e8a9386602a6fd52659c68ddf38
Files
-
f5869cfa96dfa9f7bc42314b601fefb3cfa28e8a9386602a6fd52659c68ddf38.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
X�0 Size: - Virtual size: 17.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
X�1 Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
X�2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE