Static task
static1
Behavioral task
behavioral1
Sample
f5dd57bcb2e2f1da5cac4a74476eaf3e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f5dd57bcb2e2f1da5cac4a74476eaf3e.exe
Resource
win10v2004-20231215-en
General
-
Target
f5dd57bcb2e2f1da5cac4a74476eaf3e
-
Size
321KB
-
MD5
f5dd57bcb2e2f1da5cac4a74476eaf3e
-
SHA1
8693791c4469030252adf052d3a07621affd2cd7
-
SHA256
78fb903a37e0c4353007df3280aeac803bce0e4fc4f52e14c9ee798b370f9f1f
-
SHA512
7e36f9e6bb22eb884beca31923f9648e7aa6c7884afbd5855a9f34f96ff449d442a799f7bab48596816027584cc88b1cbc48bd77010ba4704fd670a94170bbef
-
SSDEEP
6144:OTj1OTEKnsub1upoH7td/tQqG56Prd3Z5NBA3r14lJDNIl:OFOoKnsub6oHprG5+3a7STY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5dd57bcb2e2f1da5cac4a74476eaf3e
Files
-
f5dd57bcb2e2f1da5cac4a74476eaf3e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 161KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ