Static task
static1
Behavioral task
behavioral1
Sample
5e3a1e469b5d72e58a822d8968273c4e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5e3a1e469b5d72e58a822d8968273c4e.exe
Resource
win10v2004-20231222-en
General
-
Target
5e3a1e469b5d72e58a822d8968273c4e
-
Size
483KB
-
MD5
5e3a1e469b5d72e58a822d8968273c4e
-
SHA1
456203aa733306da033448154ebcbb26b1a40e91
-
SHA256
92d416272abe138d2951248993c01f254a631d5da4574283ea1d936d03324aaf
-
SHA512
ecfb2dc000db8e12335b4db95c272ec186a77b055524dd25d5010c182a57539dc7995ea2ff483ba72199b0aa2880cae6e2c9e78571eba543490e491b78f9be0b
-
SSDEEP
12288:Yft4gopTj2Ph/W1a1qHbTGr7s64ihYEPr:Ym7EhmO0uhvPr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e3a1e469b5d72e58a822d8968273c4e
Files
-
5e3a1e469b5d72e58a822d8968273c4e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 240KB - Virtual size: 721KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ