Static task
static1
Behavioral task
behavioral1
Sample
5bad508d75121afa34a8d325bfa3e6bb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5bad508d75121afa34a8d325bfa3e6bb.exe
Resource
win10v2004-20231215-en
General
-
Target
5bad508d75121afa34a8d325bfa3e6bb
-
Size
326KB
-
MD5
5bad508d75121afa34a8d325bfa3e6bb
-
SHA1
0b91b940194d364f181958860ff41e48c2a47136
-
SHA256
f1643216117b1eef45fc8cf6ee0b402a3ce71bbb5cd9d9bb366fc1e4739ee8cb
-
SHA512
49e46b5a2daaf41583890af180da51323b3c715fa36bebba369009f023414890db0c417c1ca53b7f9f7ba02e375dc753fb897d6a03c3846df522d2ce9043662b
-
SSDEEP
6144:NSFjMawzXBxgsYGiEjXu/++J8gliq6S3cKn1fKE4/3Hzr5fJsOcJf:JlzcsMsXu0GhjfKD3ZfJS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bad508d75121afa34a8d325bfa3e6bb
Files
-
5bad508d75121afa34a8d325bfa3e6bb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 325KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE