Static task
static1
Behavioral task
behavioral1
Sample
5b8d865aff0cf1ec17a62dea3eb254e5.exe
Resource
win7-20231215-en
General
-
Target
5b8d865aff0cf1ec17a62dea3eb254e5
-
Size
270KB
-
MD5
5b8d865aff0cf1ec17a62dea3eb254e5
-
SHA1
141f27590bc3daee10de594466622249a7730746
-
SHA256
6c8e8ba9cad3f96aeb6add6a6e269f9a50434bb9a55c0ec64b559c2dbb1da24c
-
SHA512
19eba9ed70f3f4375407a256aaf715a56688f0b6cdbfa24681b09345f45aed6629a3ee231bf27f0c88bab89c2bc2dd05e231e7876687d9a4a828c5d8a52deafb
-
SSDEEP
3072:ep+iCYEphBVgcPvn6RpGlgsr5/0u1cSGo2cbvlvSsoT8LmjcV+lDFWCUwmsMNDeD:FiwvX66lf5jCoBvosUbYsMND/WG7Av9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b8d865aff0cf1ec17a62dea3eb254e5
Files
-
5b8d865aff0cf1ec17a62dea3eb254e5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE