Static task
static1
Behavioral task
behavioral1
Sample
5366c1af354d540df063c0907990ab00.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5366c1af354d540df063c0907990ab00.exe
Resource
win10v2004-20231215-en
General
-
Target
5366c1af354d540df063c0907990ab00
-
Size
305KB
-
MD5
5366c1af354d540df063c0907990ab00
-
SHA1
4826c7dee07fda4b5f4e7f36886659bfebede7cc
-
SHA256
c0edf5b41b2ace6de309ea4db9386ebfa12a95efd61744e6452be5e2e8cbad1b
-
SHA512
8c1f595c6cf01e95329d30d4089b3149005c7a16cba33801b239c08539c5169fad4003ece53e3a739da70965a5b03ccf4a692c5653ed588de25675f90ff21662
-
SSDEEP
6144:W8+b6JY4tcm0PrZUeu/2/GOD6dKg0M99Z3XF5rh:Qg6NrXu/2/L6Zl5l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5366c1af354d540df063c0907990ab00
Files
-
5366c1af354d540df063c0907990ab00.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 742B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ