Static task
static1
Behavioral task
behavioral1
Sample
5673c4928ebfae29dbd73d8f13535e08.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5673c4928ebfae29dbd73d8f13535e08.exe
Resource
win10v2004-20231215-en
General
-
Target
5673c4928ebfae29dbd73d8f13535e08
-
Size
66KB
-
MD5
5673c4928ebfae29dbd73d8f13535e08
-
SHA1
e20816d4df37472cbe9572c9b4677c0ca5b5414b
-
SHA256
5f5310ec9883046fd93b4e874dea61d7f32f90d06c88c9103bc6138552289c20
-
SHA512
6b89ed1100a21961449869f86a1ff75a557897b4489b153d4f5d1ba7549a2a328268e81c8ab8454808912f459fd00be67ba7d49c5fc830b0def374971fb6889f
-
SSDEEP
1536:hjFftK6ojayubJn4hkN4247meolRs8ke81X:hjVxyu9n4qNb4CeoH/Tg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5673c4928ebfae29dbd73d8f13535e08
Files
-
5673c4928ebfae29dbd73d8f13535e08.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 320KB - Virtual size: 31.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ