Static task
static1
Behavioral task
behavioral1
Sample
5aeaefa730f57b0f6be5d7e71be54b19.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5aeaefa730f57b0f6be5d7e71be54b19.exe
Resource
win10v2004-20231215-en
General
-
Target
5aeaefa730f57b0f6be5d7e71be54b19
-
Size
3.0MB
-
MD5
5aeaefa730f57b0f6be5d7e71be54b19
-
SHA1
866ff431ff6899f4beabf9af589c3f6ca5b4dfe7
-
SHA256
e4e6379d9b11b9b123713f4acf3d0c77ef8784b8b4f0984a86960515739153af
-
SHA512
08f1992fac4aaf53b0d7f6e54390a4189d4c9612ef2574032036ed5e83d4ec14dbc0efcf6cc2d44294182790fbb29848c0de5fe04a6d2f4baeef30de756acb34
-
SSDEEP
49152:xJ7wuFqqDWLCs52PoaM6CSKyKISoE7SwhjFxGZIJcVzRf/X1Nf/+N5nns:xJ58kWYP4n39ISoE7LRGZHZRf/X1Nm9s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5aeaefa730f57b0f6be5d7e71be54b19
Files
-
5aeaefa730f57b0f6be5d7e71be54b19.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ