Static task
static1
Behavioral task
behavioral1
Sample
5cd1e9fc66c31a3c9bdad0fcf9ef19aa.exe
Resource
win7-20231215-en
General
-
Target
5cd1e9fc66c31a3c9bdad0fcf9ef19aa
-
Size
1.1MB
-
MD5
5cd1e9fc66c31a3c9bdad0fcf9ef19aa
-
SHA1
02ee45a655c405e292f600f9b8117c0a9829ee6c
-
SHA256
58e7dd0fb8182db7212d3bd3420639f9c7beab548c356be6d3358b3de55a4443
-
SHA512
f341dd2cae5f17be86112e5b1d3ab79089c2b12b9c24f731ddd4aa235a9f3c600bd21c425daefa58bf3128c63f9ccfb861bedb1c07de35d0ec5352db9b4c571a
-
SSDEEP
24576:ziph06qpnvuh7y55YbN4XcXFJQmaLGpiIqXUnih0uhPR:M0RpnvuByEbvXEmKIqEihNR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cd1e9fc66c31a3c9bdad0fcf9ef19aa
Files
-
5cd1e9fc66c31a3c9bdad0fcf9ef19aa.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 174KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 909KB - Virtual size: 912KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE