Static task
static1
Behavioral task
behavioral1
Sample
5ab5d5cf3d56ab33e9b519a662e016c5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5ab5d5cf3d56ab33e9b519a662e016c5.exe
Resource
win10v2004-20231215-en
General
-
Target
5ab5d5cf3d56ab33e9b519a662e016c5
-
Size
18KB
-
MD5
5ab5d5cf3d56ab33e9b519a662e016c5
-
SHA1
e5b7a85a455411b204f36c77b6ccb6086cb44196
-
SHA256
fbee05ba33e2c94d4bd5253dfb0a98bd0aaefba9a2cf5cc77f527d6dc4603c5f
-
SHA512
479589c7b5de1b5191b07135ebb1f0fd8d13e64ec539836725b250adfb5f7e562e60963d170b0a8e6aeab98bee58dbaebf962b1016d9f9b5c0d1129ff5688472
-
SSDEEP
384:n1ulO2vDxiW1U+pGGjlZzYenU9TbJHsYQ/XJx2+NBgY5Euv:nOO2lnGGfzYeU9BHxQ/XtNPdv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ab5d5cf3d56ab33e9b519a662e016c5
Files
-
5ab5d5cf3d56ab33e9b519a662e016c5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE