Static task
static1
Behavioral task
behavioral1
Sample
5944a7dcfb581c0cc68a2104f50eac0b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5944a7dcfb581c0cc68a2104f50eac0b.exe
Resource
win10v2004-20231215-en
General
-
Target
5944a7dcfb581c0cc68a2104f50eac0b
-
Size
60KB
-
MD5
5944a7dcfb581c0cc68a2104f50eac0b
-
SHA1
6d3eac57fa548fcab4e8d27b3d39f549e26d4c6d
-
SHA256
ffa382b4ec34135b8aafe61db68c9157679b0aeb69b131974386f235199b0cfa
-
SHA512
efec1242412678b1bb450981b69410c115dfae7932e4cf8d622d855cea9719eec8d68b8d824cc4f737716e8ea9c3bb50802e640741fc769ac53df18e7baf85d4
-
SSDEEP
768:PMd3WrG1HqclrnZpNBo4GrHkFvlvtkZu2n4L5p:1ri9ZpAElvIu2n43
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5944a7dcfb581c0cc68a2104f50eac0b
Files
-
5944a7dcfb581c0cc68a2104f50eac0b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.spm Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE