Static task
static1
Behavioral task
behavioral1
Sample
5a9c26b79ad8685eca0d78378163823d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5a9c26b79ad8685eca0d78378163823d.exe
Resource
win10v2004-20231215-en
General
-
Target
5a9c26b79ad8685eca0d78378163823d
-
Size
21KB
-
MD5
5a9c26b79ad8685eca0d78378163823d
-
SHA1
e10a773b0be7d9e53588711d029b2f2c77e39ee8
-
SHA256
ad2f73a4f99553ff44095a3970569b6d643df48a7f1581570cfcaf4a6fcd66dd
-
SHA512
6fbd9184ba02691f2bdc92320ee7ff1dcca2a1d677daa9e1db253c2e346bc81b37eaa0e279488fc6b143b071ddbb6065d273701c2e50e30e3004a84077d07cc4
-
SSDEEP
384:BMm9ovjxHu8xegFk45TeDuNpEG0RlAl3vBlnDZsBlnDZLBlnDZs1NDG:Bbu7xHuzg245SDuNp0RlwnDOnDBnD8ND
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a9c26b79ad8685eca0d78378163823d
Files
-
5a9c26b79ad8685eca0d78378163823d.exe windows:4 windows x86 arch:x86
aa6bad5b0bfecf9f9c8257e864d67fb7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
Sections
.text Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ