Static task
static1
Behavioral task
behavioral1
Sample
5b6d28159cd289971114f37ced37e1fb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5b6d28159cd289971114f37ced37e1fb.exe
Resource
win10v2004-20231222-en
General
-
Target
5b6d28159cd289971114f37ced37e1fb
-
Size
6.5MB
-
MD5
5b6d28159cd289971114f37ced37e1fb
-
SHA1
9d507b1568f0523fc2cdee8bc50d11e42d35ed09
-
SHA256
d97003630dd1a3bda7106f9985bf460e3696c79c3a5860b625d1933aceb2512c
-
SHA512
697e3a632018be85287379d48d7877abf93b6ac7b67f3f5a077034d31a74c7ed05295cca1594b7d2912bd73fb2dd508ab1a053eafbd2edde5a67f99cb67f7ae6
-
SSDEEP
196608:A9Lsz5w6XVmdCJ1gT08XbTQVTXVmdCJ1gr:Qsz+I5g08Xb0Vj5s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b6d28159cd289971114f37ced37e1fb
Files
-
5b6d28159cd289971114f37ced37e1fb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 1.4MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 214KB - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ