Static task
static1
Behavioral task
behavioral1
Sample
5a9c559f1e59073c5e524975060d93fc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5a9c559f1e59073c5e524975060d93fc.exe
Resource
win10v2004-20231215-en
General
-
Target
5a9c559f1e59073c5e524975060d93fc
-
Size
2KB
-
MD5
5a9c559f1e59073c5e524975060d93fc
-
SHA1
735bc8c3840d13a4f6ac156a9e291ef88754c17e
-
SHA256
8aa7d067141e57e9aa4f8434607f766b7f78590178770e5378ec19b16d22ed43
-
SHA512
bb752c4fae7280865a509221f8e32c6392e74324203366b183a6ec4526821f41b8b8c2d862fdfe49e158b7b9118aa54d78b1dd9938955f2c6b68772f00c9c8bf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a9c559f1e59073c5e524975060d93fc
Files
-
5a9c559f1e59073c5e524975060d93fc.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ