Static task
static1
Behavioral task
behavioral1
Sample
5d8849fcd8c5a903b9792469f7ed36da.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5d8849fcd8c5a903b9792469f7ed36da.exe
Resource
win10v2004-20231215-en
General
-
Target
5d8849fcd8c5a903b9792469f7ed36da
-
Size
93KB
-
MD5
5d8849fcd8c5a903b9792469f7ed36da
-
SHA1
2f70353cce86a6e427ebbb7155f27bf2bc7a3eb6
-
SHA256
5ca438e5e86e532ff424bc90a32bd5c456237727d0b4493929669e5a22631a46
-
SHA512
22a100e7f275edab7c7b661eff7e31a026a40675c8d7628f22ce647008e3909fac0a70227d32a574daf2dc2726c4d5f3096d8396a9af4b50913e84283db83a89
-
SSDEEP
1536:31uqPYdrqv0hbVuh9vUCJzS76q3EoWhL8P6yib/X87bnNyebLGwC:luRdrjuPvoD3tGqM/ebnNyWhC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d8849fcd8c5a903b9792469f7ed36da
Files
-
5d8849fcd8c5a903b9792469f7ed36da.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ