Static task
static1
Behavioral task
behavioral1
Sample
512b4b5bba188643c3286c7066988fa9d4a07a07a8e4216b7b2423cac1a95a88.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
512b4b5bba188643c3286c7066988fa9d4a07a07a8e4216b7b2423cac1a95a88.exe
Resource
win10v2004-20231025-en
General
-
Target
512b4b5bba188643c3286c7066988fa9d4a07a07a8e4216b7b2423cac1a95a88
-
Size
7KB
-
MD5
3492705566bcbd02c5a3c3bdde101df7
-
SHA1
88aec7f57b94c4ff8ccdf667579df001f8f50ae9
-
SHA256
512b4b5bba188643c3286c7066988fa9d4a07a07a8e4216b7b2423cac1a95a88
-
SHA512
a9f28ac60edb642e72aa58450d7c72a842e483764f7382893f73307e25932ab6554e78aa38aeb40f75345d86665b3759313ddb1f7498ea2c207732b6ff0b7895
-
SSDEEP
192:vvBJqAPhpeS1ZK8O3CDHdbzM60lkwiRK:RUAPo2M3lke
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 512b4b5bba188643c3286c7066988fa9d4a07a07a8e4216b7b2423cac1a95a88
Files
-
512b4b5bba188643c3286c7066988fa9d4a07a07a8e4216b7b2423cac1a95a88.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE