Static task
static1
Behavioral task
behavioral1
Sample
5126cfdd24d003b09ce6dc9e78f8ac44.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5126cfdd24d003b09ce6dc9e78f8ac44.exe
Resource
win10v2004-20231222-en
General
-
Target
5126cfdd24d003b09ce6dc9e78f8ac44
-
Size
304KB
-
MD5
5126cfdd24d003b09ce6dc9e78f8ac44
-
SHA1
7021486469848dbfa2008af7eefba61ac87e4c89
-
SHA256
72af8268bad0427e718c3d8e5b1746dde9c9eaee1e6512d2ff19ecae542973b2
-
SHA512
a1ea5ec24c46f264e95e19585193782333ec3c6c8e327d22f51f0cd2d663cd85c53e48bcdc437a6f5b101f29db63c6c4020df4c7ec7ec29908a0e07dd39be288
-
SSDEEP
3072:0Guo6YT3contEU5R3SCcRLpA+Dy8W3A9j65ks2Zeh1L4qQAhaNGxgXK:z9DcAtEs3d0A+X7m5/Ue34qQAq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5126cfdd24d003b09ce6dc9e78f8ac44
Files
-
5126cfdd24d003b09ce6dc9e78f8ac44.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 19.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 199KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE