Static task
static1
Behavioral task
behavioral1
Sample
5ea7be3636e0037567d3c76fdc57047b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5ea7be3636e0037567d3c76fdc57047b.exe
Resource
win10v2004-20231215-en
General
-
Target
5ea7be3636e0037567d3c76fdc57047b
-
Size
950KB
-
MD5
5ea7be3636e0037567d3c76fdc57047b
-
SHA1
570f71ad8287aeb90c7574dc0f26c7158d18cf0b
-
SHA256
8418faac2dc3358d6b18cba8908e44996b06e61c42c710ee2e2ae8b8a6576370
-
SHA512
60953ee18ce37834fd3b1674559d3fcbe11f213c627884ec6b758f4d5e648ff6654f97806fe5614fa4e9a10277cf10a5a74e1ff23cfc76b410886fa04accbe80
-
SSDEEP
12288:yiBCy/U/jYL0Y6RLCLrYVCF13+XByUjyDRl7BtogRSnV+o2TAwc:yiBxImkRLCnYVrRpmr7mn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ea7be3636e0037567d3c76fdc57047b
Files
-
5ea7be3636e0037567d3c76fdc57047b.exe windows:4 windows x86 arch:x86
1acbf79fe480b5eef0ba1ed041d1d26b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
Sections
ifbeuajv Size: 49KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zzbttlbd Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oiaphysd Size: 604KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rcatpvxa Size: 292KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE