Static task
static1
Behavioral task
behavioral1
Sample
5a183852492bc876e09f7360a7f43902.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5a183852492bc876e09f7360a7f43902.exe
Resource
win10v2004-20231215-en
General
-
Target
5a183852492bc876e09f7360a7f43902
-
Size
81KB
-
MD5
5a183852492bc876e09f7360a7f43902
-
SHA1
280b93f5ce67c914c11bf1ad7c6f696fb6525693
-
SHA256
fdac143643f314774a790989ecf3c65e67ef397c7b12cbcff1ec164a2370d9e1
-
SHA512
389af0c6d83cf5c230c19e304786f5d2f3850bd5f63d9168a600f43561082ccfb143f23ced59e8f65d935af381a968b7de3840807b73db8eab3ea959f8345ed6
-
SSDEEP
1536:nAFITlP62vAswQyquDIl4ZhV2SHHA4yavupAhY10uNHBLVYxm2++axvrauY:nU12vAmmIl4ZhVBHryjihY/HBZ6m2++b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a183852492bc876e09f7360a7f43902
Files
-
5a183852492bc876e09f7360a7f43902.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
sec1 Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sec2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sec3 Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sec4 Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sec5 Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ