Static task
static1
Behavioral task
behavioral1
Sample
5395c5f03b8f397d1cf519229992a73e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5395c5f03b8f397d1cf519229992a73e.exe
Resource
win10v2004-20231215-en
General
-
Target
5395c5f03b8f397d1cf519229992a73e
-
Size
17KB
-
MD5
5395c5f03b8f397d1cf519229992a73e
-
SHA1
d8cab5558a85ca4e7d4e1a4e36ee63d706fabd90
-
SHA256
cd536b75df3cd5847ceac82d5b44a3965f02b7efc7b79ba93c0e5b0b1a5e008e
-
SHA512
f42ea5e91042668a02d8f8a86af6c3cde92bf47400b7c1c7b342ba8bf5682f8fc4f876ac0f09fe0b46a568fc20e12e100b8f11f8395aebfa25db5187fc589c64
-
SSDEEP
384:h5kAsWojnwgtfgXUMn3QtXP/U1SQuwWaNJawcudoD7U8xX:cWoDVYXUDXP82QnbcuyD7U8t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5395c5f03b8f397d1cf519229992a73e
Files
-
5395c5f03b8f397d1cf519229992a73e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE