Static task
static1
Behavioral task
behavioral1
Sample
5bd3e0efb8b42f031dd2cee455dd3f63.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5bd3e0efb8b42f031dd2cee455dd3f63.exe
Resource
win10v2004-20231215-en
General
-
Target
5bd3e0efb8b42f031dd2cee455dd3f63
-
Size
66KB
-
MD5
5bd3e0efb8b42f031dd2cee455dd3f63
-
SHA1
2491982ce3826dfe0ec60339327170fc154c4829
-
SHA256
b9aa0902e40444d105f256de69343008ab535d27b3a49cd3e28f63210c9dc138
-
SHA512
ff4a969a63708bb6ab2774091d948f598aed18aab6cd32b2a02229173a2189a7002c283b60fa08dfd27679d134184297a11025fd3c603889bc2985d52eda0e1e
-
SSDEEP
768:SG32vb3YJkQFVwAfzt0+ebO2laTjRjZgc+J4SYlI5o194jpiAoOZs:rM78T7t0+OO2ATVKc+2HIQa8AoOC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bd3e0efb8b42f031dd2cee455dd3f63
Files
-
5bd3e0efb8b42f031dd2cee455dd3f63.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pb Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE