Static task
static1
Behavioral task
behavioral1
Sample
5ec5f5e3bc54fc7f43ce757601549e99.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5ec5f5e3bc54fc7f43ce757601549e99.exe
Resource
win10v2004-20231215-en
General
-
Target
5ec5f5e3bc54fc7f43ce757601549e99
-
Size
350KB
-
MD5
5ec5f5e3bc54fc7f43ce757601549e99
-
SHA1
3ba2f5da7d8f09e2e4cc11c554f9b4b1a63b78e5
-
SHA256
e0c436123919a440db87099ed612d6d99eb46d7845c66524445744953d91ab75
-
SHA512
fed32f116fee2973aa1a1e266ea55fc964e3ed844d90e21b1dbc0e4f0cbe87aaad5128f40071406035091cb63b463324e8015bf1b462fcd7f94e32e518104233
-
SSDEEP
6144:/xrEmcTGAdTwQgF5V5vUymOXVORLYVTyqNsabnyl6SzkNiREpKgfgz8mSY4:+sBF5V5vUyXVORLYwqN9IEpKkE4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ec5f5e3bc54fc7f43ce757601549e99
Files
-
5ec5f5e3bc54fc7f43ce757601549e99.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE