Static task
static1
Behavioral task
behavioral1
Sample
5ef80575e558ceca35576adbd62b59d7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5ef80575e558ceca35576adbd62b59d7.exe
Resource
win10v2004-20231215-en
General
-
Target
5ef80575e558ceca35576adbd62b59d7
-
Size
5KB
-
MD5
5ef80575e558ceca35576adbd62b59d7
-
SHA1
4f19a4b78ff465ed893dc5ab2603f557f45030e0
-
SHA256
680fde57cd1852e40f707e313dca2efcad0bb186107875665ae6c65c336f6e57
-
SHA512
1658e8bfde68b3753f2f4f0c60dc84e9e02bf5ca249684cf3f2fc78b481f3cfa6f8f84a43a59ca72c9e4a064058bbd5ba97d96ac8e4115a832eb0f9637256a93
-
SSDEEP
24:e9GSJr1zKjyb3vHxhcHt11E6BexWf5YRQ80iTF7Mf2ssf:K9NK2jx4/E6BoRQ87Fp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ef80575e558ceca35576adbd62b59d7
Files
-
5ef80575e558ceca35576adbd62b59d7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 512B - Virtual size: 38B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 35B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Gogi Size: 608B - Virtual size: 608B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.GWan Size: 816B - Virtual size: 816B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE