Static task
static1
Behavioral task
behavioral1
Sample
5fbf42088ab4fbae9d9df082a1da9a6a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5fbf42088ab4fbae9d9df082a1da9a6a.exe
Resource
win10v2004-20231215-en
General
-
Target
5fbf42088ab4fbae9d9df082a1da9a6a
-
Size
202KB
-
MD5
5fbf42088ab4fbae9d9df082a1da9a6a
-
SHA1
a1c56d3e013c79b95f928c901b54d068d1756a55
-
SHA256
75eaa05aa3d9cc4f740a69628efbf67a17160a6a995ab00022c458f3f6f544d0
-
SHA512
d14f7f246de0f31901c992518846a55947b99acaae1cddcf699c286426d9c16b63203d0fe6bca82cf6b8d4985c467c5ca870e3979a1cbb41e6a509baff319391
-
SSDEEP
3072:bsxfCMMBPK9ll5E8IifDi7kBTvBgLJlOssD/qAtF0vOx9l1F9d9FyddsUEmS3hvp:oXQWoifdT2LHO7/qyzv93muhv1yYH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5fbf42088ab4fbae9d9df082a1da9a6a
Files
-
5fbf42088ab4fbae9d9df082a1da9a6a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 130KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 27KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 14KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE