Static task
static1
Behavioral task
behavioral1
Sample
5bb25146c892f1ee2a37043cd187e213.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5bb25146c892f1ee2a37043cd187e213.exe
Resource
win10v2004-20231215-en
General
-
Target
5bb25146c892f1ee2a37043cd187e213
-
Size
279KB
-
MD5
5bb25146c892f1ee2a37043cd187e213
-
SHA1
10f7af7c4d429b6b4969f441aa5db78f7207d092
-
SHA256
73e8366cb6b9ecfce6018c412359c7ea49de0cd9a389d3f839bfc100888b7d1d
-
SHA512
6e1f477df67ab8321a502101bb4659ed858ede000594a6b0c1a4927f75bc19092e117f70824fe301d4a548a5f39d3087b7f5acf6184b5598214dda7149f8da68
-
SSDEEP
6144:hI0eVzD0ffEYFRpyqu2Kvox7rAaoayPBKOOex8pmgVo8aeqZ6:hZmzDuflFvnuCzOr+mgVq6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bb25146c892f1ee2a37043cd187e213
Files
-
5bb25146c892f1ee2a37043cd187e213.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 244KB - Virtual size: 243KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ