Static task
static1
Behavioral task
behavioral1
Sample
5187abe68b4bef1453ad77a092f46ecc9bc61651956f3514a7234868c273bdd0.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
5187abe68b4bef1453ad77a092f46ecc9bc61651956f3514a7234868c273bdd0.exe
Resource
win10v2004-20231023-en
General
-
Target
5187abe68b4bef1453ad77a092f46ecc9bc61651956f3514a7234868c273bdd0
-
Size
2.1MB
-
MD5
b391e86448a4a89a322f2ecacffdc02d
-
SHA1
7525f8d99dd86f3d6d5199d3ba59782e6284a95c
-
SHA256
5187abe68b4bef1453ad77a092f46ecc9bc61651956f3514a7234868c273bdd0
-
SHA512
3c5a3cbe0a790ab04d5aa94b6cc323be573bc31c402fed6565459f43a51a29265021ed55f7f6a08be078fbe55b00adfa0f4206a67a247ba9cff88b4d00625860
-
SSDEEP
12288:uTgvmzFHi0mo5aH0qMzd58e7FsXPJQPDHvd:uTgvOHi0mGaH0qSdxFsx4V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5187abe68b4bef1453ad77a092f46ecc9bc61651956f3514a7234868c273bdd0
Files
-
5187abe68b4bef1453ad77a092f46ecc9bc61651956f3514a7234868c273bdd0.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 204KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 156KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE