Static task
static1
Behavioral task
behavioral1
Sample
5996be4d83a48a25af6a1d488581c618.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5996be4d83a48a25af6a1d488581c618.exe
Resource
win10v2004-20231215-en
General
-
Target
5996be4d83a48a25af6a1d488581c618
-
Size
480KB
-
MD5
5996be4d83a48a25af6a1d488581c618
-
SHA1
595bede1ba3b1e06a7c0f3ddcbe6ed4c83f2dbe6
-
SHA256
0215e2b9c7c5d26a82f368541cdf8e4ed1515726d85bce5bd37c7a7bbbc96783
-
SHA512
ec761b17b14525a1cd42b149d9f4ce9fa73165d4ad9223fc0587c65c24c55cf37d89356c4e090d2cc270cf25d1496b8bad36df77b27679a93c633457b7b7257e
-
SSDEEP
12288:+8LTN070X6aRDGOdMcymkXfm66ZncgPa:+gN070KWjzymyf8cgP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5996be4d83a48a25af6a1d488581c618
Files
-
5996be4d83a48a25af6a1d488581c618.exe windows:4 windows x86 arch:x86
548154f0366672166fe0b69e0870748b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
ClearCustData
kernel32
GetCurrentProcess
user32
GetShellWindow
Sections
.text Size: 475KB - Virtual size: 476KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE