Static task
static1
Behavioral task
behavioral1
Sample
2s5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2s5.exe
Resource
win10v2004-20231222-en
General
-
Target
5422bfd95aa908fae284c1faafee0128
-
Size
156KB
-
MD5
5422bfd95aa908fae284c1faafee0128
-
SHA1
2f760afa324d4423b263f196ef3f8715eab0dffb
-
SHA256
5bb8967024c960d2c9c1e31c932858cb18df85a1dfdf3c388714a988f4b5957a
-
SHA512
f459ee3bdc5f041cbf2abe69a082f084ce79cb00aa2d77cc0e23176df4961a0b214c87836dc43bc0fa790654643ee37bd668382abdd2d20be4c034694a3272dd
-
SSDEEP
3072:cFUDk//n9IVx+puzUCeyDB06ZLNRzOlPeUOarYy0vkp5QIdz/Nuc:wkYpuzNecZPOlPiacyZ77
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2s5.exe
Files
-
5422bfd95aa908fae284c1faafee0128.rar
-
2s5.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 155KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
下载说明.htm.html .js polyglot