Static task
static1
Behavioral task
behavioral1
Sample
f5fe20daf8374f798bfe7a4234065f3e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f5fe20daf8374f798bfe7a4234065f3e.exe
Resource
win10v2004-20231222-en
General
-
Target
f5fe20daf8374f798bfe7a4234065f3e
-
Size
795KB
-
MD5
f5fe20daf8374f798bfe7a4234065f3e
-
SHA1
83acf017b0c3ac43b9d254dc8df81edb9fbbd01c
-
SHA256
bdc1a2a699c40859a31f22604bb01a88d70746b619f84fd216f1d403bd5792f9
-
SHA512
62e3cf153b1486ab4458d67f47e1f6735c2dfa4aec77cf857ab827bb78b972feb86c049be4036c8177065ec603cd9a6bc6944bb8185bfb6ebe280f6125dab6b0
-
SSDEEP
6144:UZfec9EbXDk6Rk8KME2EBE2EorG1VVE+I2GFrQZb++tdsHP4+QfI6U9/UOPSe572:UZWtI6RkJMkuxerQZb+md4w1UWOB0H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5fe20daf8374f798bfe7a4234065f3e
Files
-
f5fe20daf8374f798bfe7a4234065f3e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ