Static task
static1
Behavioral task
behavioral1
Sample
5a76b70d053f0f0b228445eb3a9b31cd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5a76b70d053f0f0b228445eb3a9b31cd.exe
Resource
win10v2004-20231222-en
General
-
Target
5a76b70d053f0f0b228445eb3a9b31cd
-
Size
100KB
-
MD5
5a76b70d053f0f0b228445eb3a9b31cd
-
SHA1
0e7795e1dc4e447f0ea857b41e5da423307d5c68
-
SHA256
52246dd3cc838e66952f494312f42dcc3233350dcb7ff904adb87d86f42d58e4
-
SHA512
c8ba4196332e886379d0d34b4a4a30d6e3ccb2b234435fb82a0a5504d169c6b70b707ef316e69fd20c966cb67e8096a0fdff65f9a2c05f3bc5db12823bd9f78a
-
SSDEEP
1536:LJgjcmFtvLb5tl1cj3lLMWSiKrm2xMk9HMRFvTKV6Dy:KjcmFtvLK3lwdMkNo1TKVWy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a76b70d053f0f0b228445eb3a9b31cd
Files
-
5a76b70d053f0f0b228445eb3a9b31cd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 16KB - Virtual size: 14KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE