Static task
static1
Behavioral task
behavioral1
Sample
51a7d54838c22034162fe59d293a2e85.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
51a7d54838c22034162fe59d293a2e85.exe
Resource
win10v2004-20231215-en
General
-
Target
51a7d54838c22034162fe59d293a2e85
-
Size
199KB
-
MD5
51a7d54838c22034162fe59d293a2e85
-
SHA1
ee9c4a1fe2794f6916d1ceb4a6ed0f2ba1fc2d02
-
SHA256
7191615f44820ccbdbb587de0b2d2016b32f5f42e2ea1db80fd22223dac66235
-
SHA512
97e11f7101cd637ff8389af1963873a2d9ebebd89a0d1219386d98211540688aead3ecb5b2168cedf8f768c6ba53161e2bad85d1fc6f7f0f36d9189b8005217f
-
SSDEEP
3072:EIWjUeKx6vf1mtXTdtsHZ404Pb2EAbQDRgqLSH8D61h:yjUbAfEtXTsHpwWCSH1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51a7d54838c22034162fe59d293a2e85
Files
-
51a7d54838c22034162fe59d293a2e85.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shield Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE