Static task
static1
Behavioral task
behavioral1
Sample
5a3b27791b47b46fd80312c478d2941a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5a3b27791b47b46fd80312c478d2941a.exe
Resource
win10v2004-20231215-en
General
-
Target
5a3b27791b47b46fd80312c478d2941a
-
Size
118KB
-
MD5
5a3b27791b47b46fd80312c478d2941a
-
SHA1
2856275a9b8f4b210c6ea8eb1f1711932c312a99
-
SHA256
da8fb3f4f88ea531ad2b3626773c110278649625f0d933174ef5c9321f7ceaff
-
SHA512
aad5de4cf59a93b8ae23aedb1717326db5e283c01a334395498389629453918adc9562679f2536417448c16ce5449df17d9c69c6e731700d14c4e3078d3a3b22
-
SSDEEP
3072:Hzxa6QdNHy29ij8MXgk056mrxdcI+rly14f3GapKAao:HQpxi9Xc56Ax+Ply1UpD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a3b27791b47b46fd80312c478d2941a
Files
-
5a3b27791b47b46fd80312c478d2941a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
zyjyuveq Size: - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 117KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
u Size: 781B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE