Static task
static1
Behavioral task
behavioral1
Sample
51eb0ca35409f1c575f953585187a4d7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
51eb0ca35409f1c575f953585187a4d7.exe
Resource
win10v2004-20231222-en
General
-
Target
51eb0ca35409f1c575f953585187a4d7
-
Size
42KB
-
MD5
51eb0ca35409f1c575f953585187a4d7
-
SHA1
7b5900b72e083f350bca960ddce2014b5febe04a
-
SHA256
e9cb4a58287f77d316572b4c109e8754647295e70d9444a16effd896000041d8
-
SHA512
d674798436d0fdcdd74010af05f4c12586c5d16ada38c25cb9ac500fd4ae8e2b20420a4fe573fe4fd604d9eca3bf503ece3f6b4883fdde61d2e78794387871de
-
SSDEEP
768:kpwGsuUh/hCVy72P7hIFVEHyEHQnR102AI/m/jwRUS5CsRJLG:kSG4JsAbFVESEH602AIWjDSUqL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51eb0ca35409f1c575f953585187a4d7
Files
-
51eb0ca35409f1c575f953585187a4d7.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 41KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE