Static task
static1
Behavioral task
behavioral1
Sample
5b8219fe1e3c03845e8762e5ded29021.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5b8219fe1e3c03845e8762e5ded29021.exe
Resource
win10v2004-20231215-en
General
-
Target
5b8219fe1e3c03845e8762e5ded29021
-
Size
1.0MB
-
MD5
5b8219fe1e3c03845e8762e5ded29021
-
SHA1
407cccabacd96f3bc21b4be3c8c17014a84ba793
-
SHA256
e9284ed4c753eef368e1400d01c301401ea1fce6fc950cd1d739b63e53af0f77
-
SHA512
940eff67fe918eb8975176978239da7dcd081130a701d0bddb177b82040ba0519967a05bb929696179459fabdf5b1df8f60df8abfdc939fdd9fa2d6a5d1fce4f
-
SSDEEP
24576:RxGhMYIHTZ6tAz833KAmjn1OIn5M5KrWlI8e7903cOB2q4DBM:R2IHTZaAQHA3EyKI8idg2/2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b8219fe1e3c03845e8762e5ded29021
Files
-
5b8219fe1e3c03845e8762e5ded29021.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.PEpsi Size: 331KB - Virtual size: 652KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PEpsi Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PEpsi Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PEpsi Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PEpsi Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 814KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PEpsi Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE