Static task
static1
Behavioral task
behavioral1
Sample
5390de9f9c802a18cf36519def5c181d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5390de9f9c802a18cf36519def5c181d.exe
Resource
win10v2004-20231215-en
General
-
Target
5390de9f9c802a18cf36519def5c181d
-
Size
904KB
-
MD5
5390de9f9c802a18cf36519def5c181d
-
SHA1
1d1d858e31b5a94c7eca7f9df62805ca7ef0b2d1
-
SHA256
e9fd50b2e0c7044221adcab781856b91a3d0ba7bff0f17cd4afc602e505f9d73
-
SHA512
709d56f5c2d5baf28e82635b39234090133993959ee73fb4eae7c2ef19f879fcc1f9062928df7042663e5c6efc7b41d97525e8d8cf66b111d57573d4c06a1226
-
SSDEEP
3072:ft2cWtTBfVkfqM2SCAygRjlIqZoFzJcqZ:hWtTBdsqEPxjjoFzX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5390de9f9c802a18cf36519def5c181d
Files
-
5390de9f9c802a18cf36519def5c181d.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 465KB - Virtual size: 465KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 42KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 312KB - Virtual size: 311KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ