Static task
static1
Behavioral task
behavioral1
Sample
f651d4eb5c3cf10a3af4f9cd28ec116a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f651d4eb5c3cf10a3af4f9cd28ec116a.exe
Resource
win10v2004-20231215-en
General
-
Target
f651d4eb5c3cf10a3af4f9cd28ec116a
-
Size
5.2MB
-
MD5
f651d4eb5c3cf10a3af4f9cd28ec116a
-
SHA1
cc65208a1943628ecc74f3ad9f3ce2c51e8f5b1e
-
SHA256
c67c2ef4e7d1f67d7b755122e0485203c49859730fe128238823e4ca127ebad9
-
SHA512
da97317cc9ce0c5a3ae2b1983a5260fc5fed75d7fa8d181393da56da6e77460b77ec740c20aee3632a44db50508127ebd068462a0b3cf0b78f627d9b8a4adc19
-
SSDEEP
49152:5qIwKis0CzrwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwmwwwQ:eKisH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f651d4eb5c3cf10a3af4f9cd28ec116a
Files
-
f651d4eb5c3cf10a3af4f9cd28ec116a.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 422KB - Virtual size: 422KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ