Static task
static1
Behavioral task
behavioral1
Sample
5bcb397d9b8527e04f69f3fe57e7ab2003f32f4b0f79385a76ec9fe6d038798d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5bcb397d9b8527e04f69f3fe57e7ab2003f32f4b0f79385a76ec9fe6d038798d.exe
Resource
win10v2004-20231215-en
General
-
Target
5bcb397d9b8527e04f69f3fe57e7ab2003f32f4b0f79385a76ec9fe6d038798d
-
Size
196KB
-
MD5
29791bc74f03d5d8f4380c0aced9fab4
-
SHA1
73270027212878064c76094d3afcee4a8eb49965
-
SHA256
5bcb397d9b8527e04f69f3fe57e7ab2003f32f4b0f79385a76ec9fe6d038798d
-
SHA512
e48ca7331443bbf187314d794c19d9518415b611189af9c80f954b5e365c13f433932ff67d297bc02369612779b3a7e99008740201fd9c6e0f83140ef2057b90
-
SSDEEP
1536:mjMqxL2Q3qOLj5MtVlyEeRupqYYQe4XQxy/t/fgLdQAQfcfymNAeVtfDfKQ2UfO:4AyL9W0ElYKXeMJftffjmNAeVtfrKJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bcb397d9b8527e04f69f3fe57e7ab2003f32f4b0f79385a76ec9fe6d038798d
Files
-
5bcb397d9b8527e04f69f3fe57e7ab2003f32f4b0f79385a76ec9fe6d038798d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.Upack Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE