Static task
static1
Behavioral task
behavioral1
Sample
5975092b9139005df33ff100636752cc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5975092b9139005df33ff100636752cc.exe
Resource
win10v2004-20231215-en
General
-
Target
5975092b9139005df33ff100636752cc
-
Size
408KB
-
MD5
5975092b9139005df33ff100636752cc
-
SHA1
07c1127408b698358cdc2612b0bfab749c595c41
-
SHA256
e3ab66bbde5500e5c7fb874d17d43ff433de0a5fac0460c0c0667697851b1d5a
-
SHA512
1ba0a8229e6785a929e806a3f07bbdb3c6fea68618fc5e436d9922454301c6237eea090fe17de1cd9df8d4a42dd594aebf25a2d7ba69a81fd6ed430eadd01a70
-
SSDEEP
6144:SirDbcjxG0oCX+tq/IVgG6T7SBQH2a92WUVBwJjfKOBIirDbl:kwq/aFQJH2LzY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5975092b9139005df33ff100636752cc
Files
-
5975092b9139005df33ff100636752cc.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ