Static task
static1
Behavioral task
behavioral1
Sample
5543c86cf9e313d7502becd0d9a1190d.exe
Resource
win7-20231129-en
General
-
Target
5543c86cf9e313d7502becd0d9a1190d
-
Size
1010KB
-
MD5
5543c86cf9e313d7502becd0d9a1190d
-
SHA1
c749c12ba65eb2c3e94825254b4559238d292314
-
SHA256
77f2ff4667e5870966277691a19329fbc90c81fe27f241f06471afed4f2cb621
-
SHA512
c5c28825f2843ae4f455d8d3b4dbb9b1565e583db2e9ebb177ffb30b4e000bfbfb5bcf350962212c0621adb9bb5d4d56dfcf4351e9a22b3d03c222a24c971e1c
-
SSDEEP
12288:722kcfS/Ap4pVJOkOD/dQzYSXnmjk+pFfH+Awq93nqpT+3AqaLNZbLOjq9+2djdw:SxcsAQVbOL2Xnmjk+veAd3nf3sNxUqvq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5543c86cf9e313d7502becd0d9a1190d
Files
-
5543c86cf9e313d7502becd0d9a1190d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 601KB - Virtual size: 601KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ