Static task
static1
Behavioral task
behavioral1
Sample
5ef6499ee749a96c27012a27e5c1c6ab.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5ef6499ee749a96c27012a27e5c1c6ab.exe
Resource
win10v2004-20231215-en
General
-
Target
5ef6499ee749a96c27012a27e5c1c6ab
-
Size
168KB
-
MD5
5ef6499ee749a96c27012a27e5c1c6ab
-
SHA1
c21d1b57483e79838654817c0e7dc824b5dc7f02
-
SHA256
00456e9b096b3847f2ba0189bad40daa6ee22d4d73a6fb9aec61e6952f599480
-
SHA512
50c32c1589fdc0c98300bcd8683f6c47443f0cfbf2ec3ea3419675698b23869da2b00d20e26c57e337aa32478895318de918c3b090d185153749780ccdd54d83
-
SSDEEP
3072:NPOKkQVnq1ogQLrEZ4qJBq24DQpoizLWWXalMIjYcJr+FJ8EXr42WWmx7j:9nJpyJBq24sGiHgBYPWhdj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ef6499ee749a96c27012a27e5c1c6ab
Files
-
5ef6499ee749a96c27012a27e5c1c6ab.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 391KB - Virtual size: 956KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE