Static task
static1
Behavioral task
behavioral1
Sample
5af67d75386df0b082886f7aa9de8c76.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5af67d75386df0b082886f7aa9de8c76.exe
Resource
win10v2004-20231215-en
General
-
Target
5af67d75386df0b082886f7aa9de8c76
-
Size
883KB
-
MD5
5af67d75386df0b082886f7aa9de8c76
-
SHA1
3945f8490d9ef27b3b0e2a3db6782a37851e29c0
-
SHA256
5fed0fb9cbed96cd7532b8234a0489ab61f4a9f9d4fa40c0b467c9ac9e72702e
-
SHA512
265c8248a6ea93fd83e01c7986abf301ecf88fd3c4491e23e1da97fba582e6cdcf7ce6a2bb33c1d94882ccb3d5dfce18635b2ec9cb190218609f337e7ebf3075
-
SSDEEP
12288:/voNz4gk8nydwfgeav/nbS6qFCA9biH1euoxq4fYBCAUS:/QPNydReMnbCcJHIzIXTUS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5af67d75386df0b082886f7aa9de8c76
Files
-
5af67d75386df0b082886f7aa9de8c76.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 658KB - Virtual size: 657KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ