Static task
static1
Behavioral task
behavioral1
Sample
5bdadce085b73766cf05df40b6250b2e0bd4dd5b238caa5aec6588654738879e.exe
Resource
win7-20231130-en
Behavioral task
behavioral2
Sample
5bdadce085b73766cf05df40b6250b2e0bd4dd5b238caa5aec6588654738879e.exe
Resource
win10v2004-20231127-en
General
-
Target
5bdadce085b73766cf05df40b6250b2e0bd4dd5b238caa5aec6588654738879e
-
Size
886KB
-
MD5
ca218988e6028728d44f7aa2c0df00cf
-
SHA1
15a06317fd28c706882d48e65c02300c953b980b
-
SHA256
5bdadce085b73766cf05df40b6250b2e0bd4dd5b238caa5aec6588654738879e
-
SHA512
d574d4eb22ddca26b0f82af62ad17edda167ffee20d29df74e142a436773f12e13706469cd31b588ac75075db53efb537b2838aaadddbd3bb4e91b5fb5ac3660
-
SSDEEP
12288:nWl5nF8Koyqt0PmLGB8RWQ/nhnjElIlo+pYvk5tVK64dqrlb3:Wl/oyu0PmGB8F/nJIlSWvk57K6Hhb3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bdadce085b73766cf05df40b6250b2e0bd4dd5b238caa5aec6588654738879e
Files
-
5bdadce085b73766cf05df40b6250b2e0bd4dd5b238caa5aec6588654738879e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 689KB - Virtual size: 689KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ