Static task
static1
Behavioral task
behavioral1
Sample
5cf002e0e724b93d7ae611d4d153f525.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5cf002e0e724b93d7ae611d4d153f525.exe
Resource
win10v2004-20231215-en
General
-
Target
5cf002e0e724b93d7ae611d4d153f525
-
Size
197KB
-
MD5
5cf002e0e724b93d7ae611d4d153f525
-
SHA1
44e08fd4b138a20d336914efb76bd21578512cd6
-
SHA256
c1b5d1deb34220f8eb9eec08747f4938faee70ce341a5d065bacb86c461740d4
-
SHA512
de403fcfc962a8776792f6bf410c7c16324c066ce648389fcd70bd8d22501f9e0d12a9ee48504f13ace8eb7e227d2b07a6a7ce395071f05fedacc979bf2b9508
-
SSDEEP
3072:Wdh9XTyCLo6DZLnNJvbZ9ns+GRHcu8zc9zziMMGjhOhKxLtr:WTp1LRDZLnNJl9sNHd+SJYQJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5cf002e0e724b93d7ae611d4d153f525
Files
-
5cf002e0e724b93d7ae611d4d153f525.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 128KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 13KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE