Static task
static1
Behavioral task
behavioral1
Sample
5afaa3f0175ea92212fd9cd4a394c702.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5afaa3f0175ea92212fd9cd4a394c702.exe
Resource
win10v2004-20231222-en
General
-
Target
5afaa3f0175ea92212fd9cd4a394c702
-
Size
184KB
-
MD5
5afaa3f0175ea92212fd9cd4a394c702
-
SHA1
d08758f59bde2825f6969df4ceee071684f139d4
-
SHA256
c5e43c1b6ea4f1c2195a6a56378a001521cf8d362ab3d0924abae12f64c75ea6
-
SHA512
453deaa63c58f01d4ccc16990ac63c79fc1d5ceb468d76c7d688cd80820c7488fd8c56a312dcf5e6250316e48be1ad6b08409c3f14912e34f42d55a2ab870a8e
-
SSDEEP
3072:ohi0onmOVuFmgLjjIFpVl8SYqOAWtxilTRSxcsP6aylY3pF6:ohVox+mgTIHVl8r+zQylY3pF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5afaa3f0175ea92212fd9cd4a394c702
Files
-
5afaa3f0175ea92212fd9cd4a394c702.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ