Static task
static1
Behavioral task
behavioral1
Sample
54647ef8f1758e1d58e169f984c186ae.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
54647ef8f1758e1d58e169f984c186ae.exe
Resource
win10v2004-20231215-en
General
-
Target
54647ef8f1758e1d58e169f984c186ae
-
Size
37KB
-
MD5
54647ef8f1758e1d58e169f984c186ae
-
SHA1
fb82aef499515ea6887510cc3f986530f974c188
-
SHA256
f7af59e9c4cfc8fe7e0bc28921e8902501a319050f6542df49f7c820c5f61178
-
SHA512
e311f6aea13c64e74c46eead639f36f5a5df899871f2c845d98e1552d3a116ee08824769c27985238938a478d81b6c33e9bad2b95db50bf4be7b46a45025d1c6
-
SSDEEP
768:/abKhr3KBrnTk+XFZXnRswZ2LhWqsxts0l0B:VN2HpFZXCUpq+CjB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54647ef8f1758e1d58e169f984c186ae
Files
-
54647ef8f1758e1d58e169f984c186ae.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 32KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.packet Size: 4KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE