Static task
static1
Behavioral task
behavioral1
Sample
5cfa4eb867d95ef2fc8544ac89a68db9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5cfa4eb867d95ef2fc8544ac89a68db9.exe
Resource
win10v2004-20231215-en
General
-
Target
5cfa4eb867d95ef2fc8544ac89a68db9
-
Size
174KB
-
MD5
5cfa4eb867d95ef2fc8544ac89a68db9
-
SHA1
39f796e641b6b3ff58353d950b05cc9762c4595f
-
SHA256
52c4ac23f10ca8ef0972800bf17dd1e78058277d2c89473971fdb3633e361327
-
SHA512
f0848bc7d74c29d6fe471c368e4ac624e4815ccdf2b5aa9bd323afb869a522cca227c6c48d28ce18491f82dd5800873c72b743c3dce3a3b56a636cc50b321115
-
SSDEEP
3072:fLiZutYLH2vSF3En1Yc71vo6/9aNjUJEfG41ZJCua8pXbgFmfDkdKAEP1TPzrc7S:jouiUnD1VOUJNu/1ZfDXAEP1zc769/cQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cfa4eb867d95ef2fc8544ac89a68db9
Files
-
5cfa4eb867d95ef2fc8544ac89a68db9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 55KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 59KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE