Static task
static1
Behavioral task
behavioral1
Sample
5a218d347d3c472031b99054196b6a1f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5a218d347d3c472031b99054196b6a1f.exe
Resource
win10v2004-20231215-en
General
-
Target
5a218d347d3c472031b99054196b6a1f
-
Size
97KB
-
MD5
5a218d347d3c472031b99054196b6a1f
-
SHA1
70c9f6c811e271eb399d101af16178b78ac75ca9
-
SHA256
d415cc1a5f1b0f2a2f394517455df3a2a4778cccf64f4790f2a28118058dce91
-
SHA512
eb6f62989713d32e76c02424cdeb513cfe7a4fff67446d422e95f2ae944206a31540be1a675e8948204db8d383cad3a61b69f697cded40a25edde6b4930649fb
-
SSDEEP
1536:5vg60xBVlod+UatwtZPVc6xw0wMoORizUPliPsv:RgBBlK+UTN/xw0wxOMUMPsv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a218d347d3c472031b99054196b6a1f
Files
-
5a218d347d3c472031b99054196b6a1f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
j"ej"e Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
j"ej"e Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
j"ej"e Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ