Static task
static1
Behavioral task
behavioral1
Sample
53b5d1e6ca7eb4256bd1bcb9623c7c6e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
53b5d1e6ca7eb4256bd1bcb9623c7c6e.exe
Resource
win10v2004-20231215-en
General
-
Target
53b5d1e6ca7eb4256bd1bcb9623c7c6e
-
Size
1.4MB
-
MD5
53b5d1e6ca7eb4256bd1bcb9623c7c6e
-
SHA1
a1db7cd7b9a6c7a07439ca64339e752a9db5625e
-
SHA256
1ecaa7abed473abb98e847987b15ba10390c64a33ce4be7aa424d20cb91b964d
-
SHA512
f67aa51096b4a1b4cfccc3d10d94641025fe6b9f33e72e6d50faecd8dcedf203991c8ac9aeed55323ee3da7f50ad75517e8cf21502809ed7bae921ebbbf1d017
-
SSDEEP
12288:CwCXnLquXU99ICYj7xrcqPkePh+RvMaBlYJQCe2m9Or:5Fn9pYjFMePh+RpBlU69Or
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53b5d1e6ca7eb4256bd1bcb9623c7c6e
Files
-
53b5d1e6ca7eb4256bd1bcb9623c7c6e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 813KB - Virtual size: 828KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zz Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE