Static task
static1
Behavioral task
behavioral1
Sample
5a4fb0e668c5b2c5a85d9181639f2d5e.exe
Resource
win7-20231215-en
General
-
Target
5a4fb0e668c5b2c5a85d9181639f2d5e
-
Size
20KB
-
MD5
5a4fb0e668c5b2c5a85d9181639f2d5e
-
SHA1
8f0c7aa6c1113156813637fc853be458c7f21057
-
SHA256
64dc3d0f21b68e13fd81dd1d1a802d39051270d3aaea84931ddb58364f3bd748
-
SHA512
2f0122d2646ab776f094ace1f905edef55b2e92228b0131ad33758493873f8c0953814fdbfd3ca64fa487662a2637c2ef16166f2804a29597127e7bfc1d8e0b0
-
SSDEEP
384:6G0/rJxWLbmzurY9UJ2SQbdO9sV8IU7WV/5x7UMuZVF/samtbOelX2NFH:6/Cmzuc9FZb8IU72xxgbsamtSfNFH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a4fb0e668c5b2c5a85d9181639f2d5e
Files
-
5a4fb0e668c5b2c5a85d9181639f2d5e.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 19KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE