Static task
static1
Behavioral task
behavioral1
Sample
5b3e1fee230d7af6c1c22c4c2a180f91.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5b3e1fee230d7af6c1c22c4c2a180f91.exe
Resource
win10v2004-20231215-en
General
-
Target
5b3e1fee230d7af6c1c22c4c2a180f91
-
Size
1.2MB
-
MD5
5b3e1fee230d7af6c1c22c4c2a180f91
-
SHA1
b57f8020f7279eac1984a004aa1151813ca2db77
-
SHA256
8423ca4150f748ddf5fd8c779e1cbaff23ff9b96eb7549363f37cf0e31c4559d
-
SHA512
5917a7c350595d37b68bc4e7512542d5f205a27331328527e9dedbba07482fbff00be6aa83b84fc5b9465195007c2b656904de7652be1c5f76aed1ea4b2d5290
-
SSDEEP
3072:cvFOKHA1BAvVUNbdiE+g1J770p/3ywnCVkZzIoog0UF0fa2vRqKOfNIVHr7ld0Z0:cvFHHmOVUNbxBfo6ECmZzIHgWRlhRdR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b3e1fee230d7af6c1c22c4c2a180f91
Files
-
5b3e1fee230d7af6c1c22c4c2a180f91.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ