Static task
static1
Behavioral task
behavioral1
Sample
c5bccebb305448432b83363914d2996cb34141f045158344f6449dee40c2f6d5.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c5bccebb305448432b83363914d2996cb34141f045158344f6449dee40c2f6d5.exe
Resource
win10v2004-20230915-en
General
-
Target
c5bccebb305448432b83363914d2996cb34141f045158344f6449dee40c2f6d5
-
Size
2.7MB
-
MD5
df048e34dab3e4681e74ce07afc02c85
-
SHA1
07e2b08d33d9d62eff635ab7718c75ca01774f38
-
SHA256
c5bccebb305448432b83363914d2996cb34141f045158344f6449dee40c2f6d5
-
SHA512
e85c4791e215c480d26ffee0d2b9ac2186aa9ae996ed7655a6d6c0345ddd3cf40150de07448bbf6c71e09825ed151c1a801f129b0b9d083bc7d4a4a25cd6414d
-
SSDEEP
49152:e4SPWJ0YC5XiD1sa7lu/vmy4kalLo9VNdMz6WJc1dHcF3dtaSCrL:sPPD5yh7svmPka5o9XdMbJc1O3dYr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5bccebb305448432b83363914d2996cb34141f045158344f6449dee40c2f6d5
Files
-
c5bccebb305448432b83363914d2996cb34141f045158344f6449dee40c2f6d5.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 240KB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.1MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 32KB - Virtual size: 32KB
IMAGE_SCN_MEM_READ