Static task
static1
Behavioral task
behavioral1
Sample
5bcb71297ab69cd8a00615b5e3096bdd7d2acb24ab187426bb0f312fe08b1374.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
5bcb71297ab69cd8a00615b5e3096bdd7d2acb24ab187426bb0f312fe08b1374.exe
Resource
win10v2004-20231020-en
General
-
Target
5bcb71297ab69cd8a00615b5e3096bdd7d2acb24ab187426bb0f312fe08b1374
-
Size
195KB
-
MD5
44a2581585cd668e2b73e55c10a99e7c
-
SHA1
dd52056a0f1d7e620efc51f5733886b7193fc43b
-
SHA256
5bcb71297ab69cd8a00615b5e3096bdd7d2acb24ab187426bb0f312fe08b1374
-
SHA512
5fc7344b83a7cb8709ec9c8830a0abf9275f8426aa6378d152de061b4af4ec60600bd21d62b8b7d13cd2dcbb45b1222c7bee8b22e60922ee8ef4a2ac75ea3573
-
SSDEEP
6144:rBs27MMLyX5HXXXDTXXXOGqIII+pXXX5AYjKXXXDoXXXG6XXXxXXXLIIIEAkOCOR:rK20HXXX/XXXFqIIIcXXX5j2XXXcXXX8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bcb71297ab69cd8a00615b5e3096bdd7d2acb24ab187426bb0f312fe08b1374
Files
-
5bcb71297ab69cd8a00615b5e3096bdd7d2acb24ab187426bb0f312fe08b1374.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE