Static task
static1
Behavioral task
behavioral1
Sample
5b89ce5edc8ff55f0a0a8b39c2f8058c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5b89ce5edc8ff55f0a0a8b39c2f8058c.exe
Resource
win10v2004-20231222-en
General
-
Target
5b89ce5edc8ff55f0a0a8b39c2f8058c
-
Size
81KB
-
MD5
5b89ce5edc8ff55f0a0a8b39c2f8058c
-
SHA1
76209d2acba5e7f1d5f213bc599b3c46b5602544
-
SHA256
cb6b5b9f27be54f2ca8916990d92463f5d21015e385b7b26e43597c40d16a954
-
SHA512
d1f0830be929f22cdc799586fef21c247b29f421115fa4d9aec0226c71e04bc8d1d402c7333e35b520800d85dfb1e76f2aaab20c1a6cc21c52c621223ee8410c
-
SSDEEP
768:cb0KirMarL4bpXtpzfqfJC9rFD4cYiXR4Mss4oJhRdnuhgRSoOTkzaxiqDLto:c7IL4N990Q4YSTEVnMESBkc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b89ce5edc8ff55f0a0a8b39c2f8058c
Files
-
5b89ce5edc8ff55f0a0a8b39c2f8058c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE