Static task
static1
Behavioral task
behavioral1
Sample
5612c4e30b36f6f036e5dbb345120955.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5612c4e30b36f6f036e5dbb345120955.exe
Resource
win10v2004-20231222-en
General
-
Target
5612c4e30b36f6f036e5dbb345120955
-
Size
23KB
-
MD5
5612c4e30b36f6f036e5dbb345120955
-
SHA1
1826bf0f4295d1165130d55382874e91e27c2029
-
SHA256
fe485bbcca1689d728c243821e7d650c742a262a23f8d5456d29b7f39b442bc6
-
SHA512
d96ec529a9f58489a7f2b31c88557ba01d3b8802555f7829962ea305d6ebc3a62cdf26642ca4b9e56f190c72edaa34e61015394ffae2ad54b532012cf8e1c48f
-
SSDEEP
384:istucyv/3ED2ZuhXjD5nEf/ge+JW47N4Pa5wfuGQ8FEbV7krrREYX5FyLQ:is3EMD2ZEXjVn0/gee976Pa5mxFiYrrP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5612c4e30b36f6f036e5dbb345120955
Files
-
5612c4e30b36f6f036e5dbb345120955.exe .js windows:4 windows x86 arch:x86 polyglot
03e1603aa53e9a6d1309f1970fa675e0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetProcAddress
LoadLibraryA
GlobalAlloc
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE