Static task
static1
Behavioral task
behavioral1
Sample
5785e5f2293e10afc6514f591f8d9b6f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5785e5f2293e10afc6514f591f8d9b6f.exe
Resource
win10v2004-20231215-en
General
-
Target
5785e5f2293e10afc6514f591f8d9b6f
-
Size
89KB
-
MD5
5785e5f2293e10afc6514f591f8d9b6f
-
SHA1
3267f14b7ecd6dfbecee7b0433a8d5c1dcba8734
-
SHA256
0bc828321167fbd5b2113722e2c8ee98dba3011c305f54ba7ce6c2d0cd9e1015
-
SHA512
746db0a1032e7f2e33ae42ca9fa3de666e51d30cf131379655c4a2007227bdcc6ec8a2230f070ca4eb79b90476a5275eaa235e8cbee2bcc33d2072da11820d50
-
SSDEEP
1536:4njjSN8HobfpcYOTkyFqeLIJnNs7MNHplWfwxtHvIif84DxgX7NCESjXHXnAuB:43SoEhcBl9LIHs7izntHEkxgNCEkXHXX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5785e5f2293e10afc6514f591f8d9b6f
Files
-
5785e5f2293e10afc6514f591f8d9b6f.exe windows:4 windows x86 arch:x86
d5629afc802a894cc2d8adfc78723996
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
?terminate@@YAXXZ
_CIpow
__CxxCallUnwindDtor
_Getdays
_Getdays
kernel32
CancelIo
CopyFileA
CreateMutexA
Sections
.text Size: 52KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 14KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE