Static task
static1
Behavioral task
behavioral1
Sample
5fa56e6ddef9f91181b9d9bd5538b268.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5fa56e6ddef9f91181b9d9bd5538b268.exe
Resource
win10v2004-20231215-en
General
-
Target
5fa56e6ddef9f91181b9d9bd5538b268
-
Size
618KB
-
MD5
5fa56e6ddef9f91181b9d9bd5538b268
-
SHA1
c98790b9dcc10c71cd289cc83399ac7392839506
-
SHA256
8454d42c13c4c02117dbe6dd2e346b188a24cabc5b5eecb888f25f62bb0c161a
-
SHA512
a6bc8cd0fc1c2d7cc1df3e173fc6391aa37a1cd6d8b5460f9ad01fc580209199232f77fcb5c44b151df4eac0b236ebd1eefcfc65ba477f5cbdf7cabb1fa61368
-
SSDEEP
12288:L5DQGIPO8Mz37dlK5JI8wY5Qb1DYydbVKW9InipRDJFJG0Q3X7eCIHAqeXbhEro0:dDdIPO8Mz37dg5qXY5e10cb7msJq0QnO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fa56e6ddef9f91181b9d9bd5538b268
Files
-
5fa56e6ddef9f91181b9d9bd5538b268.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FERRGUS Size: 585KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE