Static task
static1
Behavioral task
behavioral1
Sample
5838a8a9d0f1321798a92e461b3959b6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5838a8a9d0f1321798a92e461b3959b6.exe
Resource
win10v2004-20231215-en
General
-
Target
5838a8a9d0f1321798a92e461b3959b6
-
Size
691KB
-
MD5
5838a8a9d0f1321798a92e461b3959b6
-
SHA1
a79614140d6c28e9d11ed472292511f0f090298a
-
SHA256
8410c33d032d72501ff99c5dc8f2f9fa9674814dcd02f2539fe93cfd08c2e27c
-
SHA512
1921d57a9e81303a076d7c0da46dcc0d2d2eb5cbf5c441486f7711d4a9f353cb501abbc3ba6555b51b51a62f3a38a05e64c33be8253b42464e2022b5b2b22626
-
SSDEEP
12288:3kuD3krVl/HcvExAm9Jzno0Y1T0xlF3Z4mxxUJBCvIrd29yLWiev:3Pg/H+6dnZllQmXUrjrd2AHe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5838a8a9d0f1321798a92e461b3959b6
Files
-
5838a8a9d0f1321798a92e461b3959b6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 776KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 374KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE