Static task
static1
Behavioral task
behavioral1
Sample
5764e468932d189ce61d54ec079bf9f2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5764e468932d189ce61d54ec079bf9f2.exe
Resource
win10v2004-20231215-en
General
-
Target
5764e468932d189ce61d54ec079bf9f2.bin
-
Size
385KB
-
MD5
5764e468932d189ce61d54ec079bf9f2
-
SHA1
9591502054f63c00a4349669558f6e2cd9a8b897
-
SHA256
c742f1d62031a5d0094fc1c288dcfb68b1dba73b862ed4423df514494b1669a8
-
SHA512
d70a41c865f2be5fa2d2b377ede8dba94d4e2b6a4c4858385541f24a02a1afa106a962a5b9798881a9b8e5b05716c0a862446f96777777ffc05b591c3a9da984
-
SSDEEP
6144:eVPKu7iVPI3CTVVhO3h25MdNXU/gTRpg1hZOpnNeArAirzHLo0nt4Q+zLbSWSoCB:Ci4g5MdNEowHOpXrzHbt4RzL0B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5764e468932d189ce61d54ec079bf9f2.bin
Files
-
5764e468932d189ce61d54ec079bf9f2.bin.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ