Static task
static1
Behavioral task
behavioral1
Sample
5a8fbe046d3e2c15d3fab949a88b9b12.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5a8fbe046d3e2c15d3fab949a88b9b12.exe
Resource
win10v2004-20231215-en
General
-
Target
5a8fbe046d3e2c15d3fab949a88b9b12
-
Size
1.3MB
-
MD5
5a8fbe046d3e2c15d3fab949a88b9b12
-
SHA1
b755a142ab03719852e7297432a04a154d9f8f11
-
SHA256
d49d79b910842b245f062094013c84b5832d7937a4822df7bf0f6c6a7b47f59a
-
SHA512
ffec45e8dad81fbf159dcf4ac1d75029271718538633251a073d897b6bfa7e95878d93a6276bca1a9188736c9b3685e92111ba91c402d2aeae7dcd3e0a36b3e0
-
SSDEEP
24576:NyNNFysBpGAxe6NJ/qyPQTXhPl/yDHYlHhZ7ku6pPZcw2XVeGpq:NkLysBpGIe6r/h4lpyGBkNZTGkH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a8fbe046d3e2c15d3fab949a88b9b12
Files
-
5a8fbe046d3e2c15d3fab949a88b9b12.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.petite Size: 367KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE