Static task
static1
Behavioral task
behavioral1
Sample
5a72b81de9ff56ecf05d64a87f067ee2.exe
Resource
win7-20231215-en
General
-
Target
5a72b81de9ff56ecf05d64a87f067ee2
-
Size
840KB
-
MD5
5a72b81de9ff56ecf05d64a87f067ee2
-
SHA1
2bf5f6b94472e017075989f3f1c36a002ae28375
-
SHA256
9f8f3e3c75ca56f281ac1b60ee36a52d3772c926e0d634aad2a66cf2b0c67d95
-
SHA512
d506282184b33b0fbc0e70fc708bc46294703afc22ff5d9910ac4588fa2c0facf55b5d0f0b2a653f4d37e60ae7103404d8763ae79df56c4015dcf29293380b4c
-
SSDEEP
12288:e38DAuApC9SnLgZFoaRi3W6Ny/uV3C9gIimgAE9To6D3pfvUJkEm987:IChoag7C9gI/w9Tou8vH7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a72b81de9ff56ecf05d64a87f067ee2
Files
-
5a72b81de9ff56ecf05d64a87f067ee2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 16KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 788KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE