Static task
static1
Behavioral task
behavioral1
Sample
5a4e475663ea98c89cfee2fcb244e3b0d05f79869fdc755b148aa3e446fc4b71.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5a4e475663ea98c89cfee2fcb244e3b0d05f79869fdc755b148aa3e446fc4b71.exe
Resource
win10v2004-20230915-en
General
-
Target
5a4e475663ea98c89cfee2fcb244e3b0d05f79869fdc755b148aa3e446fc4b71
-
Size
1.9MB
-
MD5
548986002dd3f2a7fd78fc3a8779044f
-
SHA1
5894b4a48792c261bbdb0ce3f47c3166d4383cf6
-
SHA256
5a4e475663ea98c89cfee2fcb244e3b0d05f79869fdc755b148aa3e446fc4b71
-
SHA512
cd0bf57d6b9e662d246d34f661833127781972511827f36effa039a769eafba7e3d6575313b3b32916b25f826b26ebfc33f540ba767a3e4118c005683cedb5ad
-
SSDEEP
24576:aLD/gCFEV+2TXsWPDhpav3Qn7+PslQMdSJdvqTUxxWQtK3yFuRPNNoU05ncVOt:CD/mHTcWlpavQ7+kItqgKNyFuRPNq4e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a4e475663ea98c89cfee2fcb244e3b0d05f79869fdc755b148aa3e446fc4b71
Files
-
5a4e475663ea98c89cfee2fcb244e3b0d05f79869fdc755b148aa3e446fc4b71.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 317KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 206KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 174KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 867KB - Virtual size: 868KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE