Static task
static1
Behavioral task
behavioral1
Sample
5a09473c314eac3a21d4514272f2e293.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
5a09473c314eac3a21d4514272f2e293.exe
Resource
win10v2004-20231215-en
General
-
Target
5a09473c314eac3a21d4514272f2e293
-
Size
1.5MB
-
MD5
5a09473c314eac3a21d4514272f2e293
-
SHA1
46f5254028aa0824770d33e8a79dff1c18a94d80
-
SHA256
865da9365d70d62d7bf24b4bc8a881d8d89613ff64beb0486222f795890699d5
-
SHA512
e30aa7182d48fbe1458bae8423c9cc1e0eacca8db1c64f7ac91bcf64e35c99740af89154607261ce128f0bd3bdf94e14ddd629f989e83a2f1bd1afdfecedccc9
-
SSDEEP
49152:lrq0R07QQmpChZDrqjAffn+u4F8nq5TGj3yvKy:hq0+7TZDeUffn+uinUj3yiy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a09473c314eac3a21d4514272f2e293
Files
-
5a09473c314eac3a21d4514272f2e293.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 484KB - Virtual size: 716KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1.0MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 676B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ