Static task
static1
Behavioral task
behavioral1
Sample
5a61de6c02fa18be0a8fa6c49dfe5dc9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5a61de6c02fa18be0a8fa6c49dfe5dc9.exe
Resource
win10v2004-20231215-en
General
-
Target
5a61de6c02fa18be0a8fa6c49dfe5dc9
-
Size
349KB
-
MD5
5a61de6c02fa18be0a8fa6c49dfe5dc9
-
SHA1
77e4279fb505f5ac3a9170dc39111a2ab6ac86e2
-
SHA256
e621116f36198147a8cd27ffd2cba65ce5b67439f8960abad5f88875c16bd4b9
-
SHA512
4175baa5289651d2c845709d84bad9f1dcad6a0801ebaa0f77746ddcb4035ac8e263847bc16a731d4b6a0949db921aad3187a44ee7a8dbe535dc8555e216f4ad
-
SSDEEP
6144:ZOKl15opTTeMK+T6SFo29+bJX61e2JkUzsY00tLJoxDCIpmdDGa5wrGt/JC:pweRW6StiJX6xXzHBtLJ+CIsd5FW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a61de6c02fa18be0a8fa6c49dfe5dc9
Files
-
5a61de6c02fa18be0a8fa6c49dfe5dc9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 844KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 348KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 852B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE