Static task
static1
Behavioral task
behavioral1
Sample
5266cfe0e77fb9bbbbc3f7378fe4d293.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5266cfe0e77fb9bbbbc3f7378fe4d293.exe
Resource
win10v2004-20231215-en
General
-
Target
5266cfe0e77fb9bbbbc3f7378fe4d293
-
Size
2.5MB
-
MD5
5266cfe0e77fb9bbbbc3f7378fe4d293
-
SHA1
d1dcfcfb4fe3b4cacdfe24ce6795515eea2fdb26
-
SHA256
d4859bcf83f0767ed7137827febe15b56da5794b6006a95bb1234512db032600
-
SHA512
b51affc2601c67369882b51cecf68245477463b543a6e0f07571ae4e1b4e9bc0b1cfd9062d24e479722c89d02f924ff2da2b760d95fdd03e5382b08e855bf596
-
SSDEEP
49152:/h/V5OjPcq5DxDiXUAX0UlLjawrR8wjLKuXEtZYww3IprfRHHbSWIhKJ:ZLyx+B00agR8w/K6EtOKdH9IhKJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5266cfe0e77fb9bbbbc3f7378fe4d293
Files
-
5266cfe0e77fb9bbbbc3f7378fe4d293.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.icode Size: 1KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 3.0MB
.data Size: - Virtual size: 440KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rbss Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE