Static task
static1
Behavioral task
behavioral1
Sample
5034a1e41405aa4fdcba21edb5643707.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5034a1e41405aa4fdcba21edb5643707.exe
Resource
win10v2004-20231222-en
General
-
Target
5034a1e41405aa4fdcba21edb5643707
-
Size
31KB
-
MD5
5034a1e41405aa4fdcba21edb5643707
-
SHA1
86daf85335a4f9e28e16a8864615e0a9574512bb
-
SHA256
2b3efcc80c1ad80048dc6339095a39fea2bd68a96b5dd06fde78238157c2f08b
-
SHA512
6889002d19a525dc022b47fe886ecfe6e4747fd2dd8b4fc39082669672940c79cf346a1e9c3b8942adfd0d137f4cdb06f6700e5d235de4004b9de4a7be88baca
-
SSDEEP
768:V04BtxAzphJdy/8SxBHR3x1nuHi+Zhxf9tsEs6Es5rw:VL/AzzjI8SxxXQi+Z9uEsk5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5034a1e41405aa4fdcba21edb5643707
Files
-
5034a1e41405aa4fdcba21edb5643707.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.delete Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklstb Size: 26KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relo2 Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ