Static task
static1
Behavioral task
behavioral1
Sample
5bcfa41d5e16111000c240a13217a91d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5bcfa41d5e16111000c240a13217a91d.exe
Resource
win10v2004-20231215-en
General
-
Target
5bcfa41d5e16111000c240a13217a91d
-
Size
9KB
-
MD5
5bcfa41d5e16111000c240a13217a91d
-
SHA1
6ebb462bb00ae241679ac8cef7989e1856f79918
-
SHA256
57086014be7e434a890e7aee1ef210a23762488930f996340e7b07e07535a093
-
SHA512
d6fef1a22df97d34291d08f31be72ca117ff806c7ad2d85f13fdcd6c1709cf5a17a79d0829857dcc6da86ec5d814f62b8ae7fc596ae8d410b5d9f2bada15ee40
-
SSDEEP
192:wBksu/EXVwVRXeMZZ3o93VnjdwCztz3gyzC5v:oVwfXeMkFnhwC5zlzw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bcfa41d5e16111000c240a13217a91d
Files
-
5bcfa41d5e16111000c240a13217a91d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ