Static task
static1
Behavioral task
behavioral1
Sample
5081b55ef4854c58926d6d99e408c297.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5081b55ef4854c58926d6d99e408c297.exe
Resource
win10v2004-20231222-en
General
-
Target
5081b55ef4854c58926d6d99e408c297
-
Size
268KB
-
MD5
5081b55ef4854c58926d6d99e408c297
-
SHA1
77a248aa4d97c25cc6c1da3bc20b4a79c1675fe7
-
SHA256
508c8052bd437c64ca83ff13e9c77f9b7f97caaf66d49d19e71ad7f8aa5253f1
-
SHA512
1aff13d6157b63492e2699efee30d8509a14ba8762e2c7a8f32054187ef83728923f255c37520cf9363d8eb0b2943aee7e79119dfc21ae1b539de4190d1ddebd
-
SSDEEP
6144:tPLtMDZXTwDTif+AzvNR9o3QnZkqD6hyC8Xf0ng+napE:tjt41zfnvSgZk8qgU0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5081b55ef4854c58926d6d99e408c297
Files
-
5081b55ef4854c58926d6d99e408c297.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
myow0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
myow1 Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
myow2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE