Static task
static1
Behavioral task
behavioral1
Sample
5e5f277ef0efedf1f51ed3e3ed193c99.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5e5f277ef0efedf1f51ed3e3ed193c99.exe
Resource
win10v2004-20231215-en
General
-
Target
5e5f277ef0efedf1f51ed3e3ed193c99
-
Size
2.5MB
-
MD5
5e5f277ef0efedf1f51ed3e3ed193c99
-
SHA1
b276ccf028e3e3c543a03e7cab088f9813021bdc
-
SHA256
07a1466ac874355b838eb0c5871bcc00514d749fed184b7aa1f5f02ff7d14787
-
SHA512
fe6139c4d81d56c0d01fe636ea9632763691fe67ae2fc3833a0c7b681c6e5e91fda1f6b31bcfa4dba89034807b8a1886e95bbbe78031c095e885baced0c4e5dd
-
SSDEEP
24576:Biukn3KlrS7AHkwu3sHReZDoasYW+wsDaQw6DDz3qRyPnmGfrnvVUKueY8RmneWR:uKRgsYasY6DwOBfrnvV7UeWtFtI+QFKF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e5f277ef0efedf1f51ed3e3ed193c99
Files
-
5e5f277ef0efedf1f51ed3e3ed193c99.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 463KB - Virtual size: 462KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ