Static task
static1
Behavioral task
behavioral1
Sample
a5b49c3edd51570bb603323c6870902b8e7c75654fd818b2ac8de910af462f4a.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
a5b49c3edd51570bb603323c6870902b8e7c75654fd818b2ac8de910af462f4a.exe
Resource
win10v2004-20231020-en
General
-
Target
a5b49c3edd51570bb603323c6870902b8e7c75654fd818b2ac8de910af462f4a
-
Size
193KB
-
MD5
3e67d130180ff61b5e424e53e61e1ffc
-
SHA1
81e8b3ca8c851b44e1df2005df708f83e5705746
-
SHA256
a5b49c3edd51570bb603323c6870902b8e7c75654fd818b2ac8de910af462f4a
-
SHA512
1118fd25acef35af64482b572e930a3fd2076051420f55e72d2bf71b8c519223e227d2e90e29219033ad874dc5d59705dbfb36aea62fa535ae5e189ebe6254fe
-
SSDEEP
6144:rBs27MMLyX5HXXXDTXXXOGqIII+pXXX5AYjKXXXDoXXXG6XXXxXXXLIIIEAkOCO9:rK20HXXX/XXXFqIIIcXXX5j2XXXcXXXs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5b49c3edd51570bb603323c6870902b8e7c75654fd818b2ac8de910af462f4a
Files
-
a5b49c3edd51570bb603323c6870902b8e7c75654fd818b2ac8de910af462f4a.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE