Static task
static1
Behavioral task
behavioral1
Sample
5094e1529c52c3eddf0577e1be819522.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5094e1529c52c3eddf0577e1be819522.exe
Resource
win10v2004-20231215-en
General
-
Target
5094e1529c52c3eddf0577e1be819522
-
Size
67KB
-
MD5
5094e1529c52c3eddf0577e1be819522
-
SHA1
6c45508c702fa7c8b7af4b22374e6346f336ffa3
-
SHA256
e40babda8b8e9938a50dcbb19d0a47aab65f681635db58adcc6c3b0321960d0b
-
SHA512
24085545aebd8ef65ffae4865efa6f6ad1d97e1efc8b59ffa810f504d75b79fe9422df5baaa37b0a9f755d3920270d46a5be48bd1f4921e178ee24bfdd8c56bb
-
SSDEEP
1536:ZI7WjUCNkGbI2I8O49JsyY+ixBcgl1IAkkDEvkYvMCo:2WjbNkG82I8O49nYrjcgl1IAkkC9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5094e1529c52c3eddf0577e1be819522
Files
-
5094e1529c52c3eddf0577e1be819522.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.protect Size: 71KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.protect Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.protect Size: 36KB - Virtual size: 976KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.protect Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE