Static task
static1
Behavioral task
behavioral1
Sample
51b3ccde2ed466a37ac53564acedfed6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
51b3ccde2ed466a37ac53564acedfed6.exe
Resource
win10v2004-20231222-en
General
-
Target
51b3ccde2ed466a37ac53564acedfed6
-
Size
229KB
-
MD5
51b3ccde2ed466a37ac53564acedfed6
-
SHA1
c16109f88cc37d0fb84e30238762db19b295098b
-
SHA256
f5755893d22b371da30339ba1c91767e62bf01117826b3e7d92dd37a0479b2d1
-
SHA512
0f561ef8ab6d3f1c3460a76004dbb6274871b709fca4d10ec875177d5e9d7b007c6a39805601373ed54d0f96998c41839d1cd944d6b249b2bfe243c380ae5d8c
-
SSDEEP
6144:NXZ6gokzqxMc+ixte34kbb+hDutdqG7lrXlPwqz9+JY:cvHve39b6WgG7lr1Ii
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51b3ccde2ed466a37ac53564acedfed6
Files
-
51b3ccde2ed466a37ac53564acedfed6.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.oli Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE