Static task
static1
Behavioral task
behavioral1
Sample
c5c19df3f2a0ee2f6f39cfc5cb4f70d84b4c9726176a62a6a4e5d7f5bd7a57fe.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
c5c19df3f2a0ee2f6f39cfc5cb4f70d84b4c9726176a62a6a4e5d7f5bd7a57fe.exe
Resource
win10v2004-20231020-en
General
-
Target
c5c19df3f2a0ee2f6f39cfc5cb4f70d84b4c9726176a62a6a4e5d7f5bd7a57fe
-
Size
3.4MB
-
MD5
fe5e0193a32a8703c6e0d6f65cc2b884
-
SHA1
f409cfb35f73945908a1a86f5aac986dae04bb3d
-
SHA256
c5c19df3f2a0ee2f6f39cfc5cb4f70d84b4c9726176a62a6a4e5d7f5bd7a57fe
-
SHA512
24f4a9b05a7e4a1f5c916c9c33cd6cc7e146d29d6b3df24982ee148878665bad555e4802a5537cbd56cc4f3bd850ac89a394a2dcd33deac2e18952448e71e202
-
SSDEEP
49152:zyU9zvAHb4+UXUVNwc0Xu7cEWOq6YW/wWFpO2vZtITQKk2cF3dtaSCrL:F9Mb9HcEWOl/wGZtIkX3dYr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5c19df3f2a0ee2f6f39cfc5cb4f70d84b4c9726176a62a6a4e5d7f5bd7a57fe
Files
-
c5c19df3f2a0ee2f6f39cfc5cb4f70d84b4c9726176a62a6a4e5d7f5bd7a57fe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_READ
VProtect Size: 615KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.8MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ