Static task
static1
Behavioral task
behavioral1
Sample
5bad4bc43b31e289c2f94445398e0bf7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5bad4bc43b31e289c2f94445398e0bf7.exe
Resource
win10v2004-20231215-en
General
-
Target
5bad4bc43b31e289c2f94445398e0bf7
-
Size
389KB
-
MD5
5bad4bc43b31e289c2f94445398e0bf7
-
SHA1
a2da85ef2ab8326bcfc979a7e4c4af6114c1d458
-
SHA256
aabd9a93c8bc70355660d2aa87e941e062caedab62a60384e8475ca2a368eb9e
-
SHA512
889a6e7a98a8a811099d5b0af56be5d81caa8cd3960438518fb11eb9b7453b8eb0a18e6ce34a626362d0f75d6cf405fb4071c48755107f935249441e79802b41
-
SSDEEP
6144:uOtWJZ9Pgu4IF2idZecnl20lHRxp3gjv/ov4pQcoeIBbnjwJnSRr0RvO:uyCZ9jZF3Z4mxxyLQDPJjycr0R2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bad4bc43b31e289c2f94445398e0bf7
Files
-
5bad4bc43b31e289c2f94445398e0bf7.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 343KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE