Static task
static1
Behavioral task
behavioral1
Sample
f5e203bbb42a87ba3f307e1e0a270a61deb11fcaa7765858a034038b36173ca9.exe
Resource
win10-20231020-en
General
-
Target
f5e203bbb42a87ba3f307e1e0a270a61deb11fcaa7765858a034038b36173ca9
-
Size
4.8MB
-
MD5
68198ccb0122bb92b44f15123b4da98f
-
SHA1
dfccfd19d9bbe731b58a9eda089926156bd1a356
-
SHA256
f5e203bbb42a87ba3f307e1e0a270a61deb11fcaa7765858a034038b36173ca9
-
SHA512
9d9165886d8fa4b5a4768e46240b8deaf7789141fefd67d72859077f96f0bbf2cf6517a06163a9ed60a18f765f385e23179b628163259f6358ed6a09ea2b599c
-
SSDEEP
98304:+oMd9WqCSk4EGkBijqVx8g2E33MyyLF1qbVA4ZVJc1GlE:h6KSkukgj4BBaLFCrVJc1Gu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5e203bbb42a87ba3f307e1e0a270a61deb11fcaa7765858a034038b36173ca9
Files
-
f5e203bbb42a87ba3f307e1e0a270a61deb11fcaa7765858a034038b36173ca9.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ