Static task
static1
Behavioral task
behavioral1
Sample
5bada1f3ff60c7da8e19ac0a80278090.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5bada1f3ff60c7da8e19ac0a80278090.exe
Resource
win10v2004-20231222-en
General
-
Target
5bada1f3ff60c7da8e19ac0a80278090
-
Size
11KB
-
MD5
5bada1f3ff60c7da8e19ac0a80278090
-
SHA1
dfe055bc2e94181ee4a1422551bd0bcc666b9ef5
-
SHA256
dd0575a2b94b048993b4237aeced8c1a4ea5560823d9a97542e40260d1e78109
-
SHA512
efa1c1c06eab7682d9bd8b33835af15ac62c9c33eac64b35d646fe858ddf7de52e5e5b35eee02cce200662bd0e31babf191e0391e02a68e8ce689741c2d4d5a8
-
SSDEEP
192:mABnrAGOu4AsLXMVjy0xNcr5rXkUqt6hwcCwVj/O9oMkSqBfAwtwZrQh1ww:mABkGOu3sLXW7xNcr5kUQ2DUTkVWrQvD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bada1f3ff60c7da8e19ac0a80278090
Files
-
5bada1f3ff60c7da8e19ac0a80278090.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
�"V0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�"V1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�"V2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE