Static task
static1
Behavioral task
behavioral1
Sample
5b939472a9218d028f6a0c76db074fca6ad299cc5d5e60b2bf6564e275afddff.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5b939472a9218d028f6a0c76db074fca6ad299cc5d5e60b2bf6564e275afddff.exe
Resource
win10v2004-20231215-en
General
-
Target
5b939472a9218d028f6a0c76db074fca6ad299cc5d5e60b2bf6564e275afddff
-
Size
4KB
-
MD5
add03695b1abd0b5ae412b35d7efec77
-
SHA1
ffd8fe0351d2a5f601260bcca5186a0a7bd9703a
-
SHA256
5b939472a9218d028f6a0c76db074fca6ad299cc5d5e60b2bf6564e275afddff
-
SHA512
33612c92b2dcca25b0fe51a545540a1894361b4c8c6b43ba2f44097262e790058f8c501dc9e22417e931fef02fb6ec44b60707c6e58bceb5f162c479086f21be
-
SSDEEP
48:61yO2t+NT8TnlUuaRsFJlcV4MKe2IRarQkvqBHvOulZXGGyFqXSfbNtm:K4EExCrVx9raFvkhbGGyfzNt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b939472a9218d028f6a0c76db074fca6ad299cc5d5e60b2bf6564e275afddff
Files
-
5b939472a9218d028f6a0c76db074fca6ad299cc5d5e60b2bf6564e275afddff.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ