Static task
static1
Behavioral task
behavioral1
Sample
5b8ade2522b41d401bebacf7f37833fb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5b8ade2522b41d401bebacf7f37833fb.exe
Resource
win10v2004-20231215-en
General
-
Target
5b8ade2522b41d401bebacf7f37833fb
-
Size
185KB
-
MD5
5b8ade2522b41d401bebacf7f37833fb
-
SHA1
cec11b6ed725a46bbcd9c77e3ca5f3e5cab16218
-
SHA256
832ea8affe805ed99642d5f5727c92dd6b88b6502b62cc9a16e51dfad6ca44d4
-
SHA512
f132e2b515c67d33b9cfbe5ffc850dc12d56c5d4f7528a215aa346341018f4071d73168e63e2e3056167a104d8507e4b97720745fff0d5f7bb7575c81526388a
-
SSDEEP
3072:tsNXme5dt0xg9isI32qEKfkM+w6wr6pyS/VGCIPy4WXR+N0n0dMNuZZ/hS:tsNMgosfPgkMjrI/MCIPyTXRi0n03Z/I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b8ade2522b41d401bebacf7f37833fb
Files
-
5b8ade2522b41d401bebacf7f37833fb.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Bphy Size: - Virtual size: 320KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Bphy Size: 180KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE