Static task
static1
Behavioral task
behavioral1
Sample
5a2276f165794b237f057eba2261254e7660618523348b0d2e061454c152488f.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
5a2276f165794b237f057eba2261254e7660618523348b0d2e061454c152488f.exe
Resource
win10v2004-20231023-en
General
-
Target
5a2276f165794b237f057eba2261254e7660618523348b0d2e061454c152488f
-
Size
2.8MB
-
MD5
dc9a196c444445c7bbfe570b60f56933
-
SHA1
0ac1f6f3a0ecb3f31c74b1c41819e382a498d6a9
-
SHA256
5a2276f165794b237f057eba2261254e7660618523348b0d2e061454c152488f
-
SHA512
9183f6f2f80298e5f77c3d71be608b7d4d39979686be58db3083bc8a3aba930debfe6fc46e25ac92be0a50fc7e7bfe8c770923ec87268d3048f78c18325f7e64
-
SSDEEP
49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTlAb7cSN20DManDq8:c+8X9G3vP3AMSb7cP0AW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a2276f165794b237f057eba2261254e7660618523348b0d2e061454c152488f
Files
-
5a2276f165794b237f057eba2261254e7660618523348b0d2e061454c152488f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 994KB - Virtual size: 994KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ