Static task
static1
Behavioral task
behavioral1
Sample
5c5bdb356f0a7238bb21d914ac9592fa6da4bd33d28cd10c83b5d1f91873526a.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
5c5bdb356f0a7238bb21d914ac9592fa6da4bd33d28cd10c83b5d1f91873526a.exe
Resource
win10v2004-20231023-en
General
-
Target
5c5bdb356f0a7238bb21d914ac9592fa6da4bd33d28cd10c83b5d1f91873526a
-
Size
4.2MB
-
MD5
89e4027f59018817a7f82dd35451e193
-
SHA1
44003a08fe798a5b23f9641b3b358e8d59ca011f
-
SHA256
5c5bdb356f0a7238bb21d914ac9592fa6da4bd33d28cd10c83b5d1f91873526a
-
SHA512
044806114e8dd342ef8224ff29dcb819237b0f059c5856e23e801846749e6053842a157718cb620c0a8b26e1b2b0c1ab001562ea4ddfa83eaf7958da3f5cf6e8
-
SSDEEP
98304:FpAoULTVdSBp26sQLQBTZqFrFFQuvcmhylpYm:wTVdK8hQ6TyXQuvcAIi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c5bdb356f0a7238bb21d914ac9592fa6da4bd33d28cd10c83b5d1f91873526a
Files
-
5c5bdb356f0a7238bb21d914ac9592fa6da4bd33d28cd10c83b5d1f91873526a.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.6MB
IMAGE_SCN_MEM_READ
VProtect Size: 548KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 3.7MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 48KB - Virtual size: 48KB
IMAGE_SCN_MEM_READ