Static task
static1
Behavioral task
behavioral1
Sample
5af600912356920d69a2ca96c35c4650.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5af600912356920d69a2ca96c35c4650.exe
Resource
win10v2004-20231222-en
General
-
Target
5af600912356920d69a2ca96c35c4650
-
Size
1024KB
-
MD5
5af600912356920d69a2ca96c35c4650
-
SHA1
33029de3f4644c352b01ac848ede2731be4d1e64
-
SHA256
0753c81f9eec87536889908cb55d9c41697a9c12aebe950d40c3efb11297bb90
-
SHA512
8e679dcd450f6588bf8bdda9ca1e63887f7c30be894d8c55347d847a07461cfdce3646d9473ae51f70949268c297502975c2a547014c0382306e0f45e8231d8b
-
SSDEEP
24576:pin8MpySX4Y5YohswxhAYaaTFFFFFFFFFFFFFFFYaq4LjW1T87w6wavIarnR:pyplXRFLhPlxLjwylwW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5af600912356920d69a2ca96c35c4650
Files
-
5af600912356920d69a2ca96c35c4650.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 158B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE