Static task
static1
Behavioral task
behavioral1
Sample
5687c9645d8090683f65ba7ead58fd99a98666d25f276c71777f89c9dc87782a.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
5687c9645d8090683f65ba7ead58fd99a98666d25f276c71777f89c9dc87782a.exe
Resource
win10v2004-20231020-en
General
-
Target
5687c9645d8090683f65ba7ead58fd99a98666d25f276c71777f89c9dc87782a
-
Size
4.5MB
-
MD5
e68d28b68c9fdf02a0753362a960a67a
-
SHA1
0ca60dd961c21e5d2910284a649590fdfe2339b9
-
SHA256
5687c9645d8090683f65ba7ead58fd99a98666d25f276c71777f89c9dc87782a
-
SHA512
2a0d60eb245e01ec61a47af2f6a39d5f0d36a51b125056f43e2ded6ca4e19d43c46e7a0c2269a8e40cb5f4f0e89098ff0261aa901a77dbf57cca40a000342eb7
-
SSDEEP
98304:DSWnT6h5CxxafTQ0GXvIl4myniAe6cO56n9xC5xyeQ6FN:ZnoWxafqc4VkhxbeQ63
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5687c9645d8090683f65ba7ead58fd99a98666d25f276c71777f89c9dc87782a
Files
-
5687c9645d8090683f65ba7ead58fd99a98666d25f276c71777f89c9dc87782a.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_MEM_READ
36171 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
36171 Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
36171 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
36171 Size: 92KB - Virtual size: 92KB
IMAGE_SCN_MEM_READ
.idata2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mackt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE