Static task
static1
Behavioral task
behavioral1
Sample
5b9d0b6d492557421c1245f729f7a97e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5b9d0b6d492557421c1245f729f7a97e.exe
Resource
win10v2004-20231215-en
General
-
Target
5b9d0b6d492557421c1245f729f7a97e
-
Size
140KB
-
MD5
5b9d0b6d492557421c1245f729f7a97e
-
SHA1
7b2f90a01f6375d3998ff0b99ffc9e53d8525d6b
-
SHA256
9b1817bf1744701b63869c01766af35e532dd7262424736a076e25d2f63a4c89
-
SHA512
39430220f46b7984c4ae15f0f1a686aa42d8286bed49f97401c60629e4b906cdc42bb4b37bc0aea97a4e28ff1589b16533388079f2d8c08937ec5578e8c2a2a1
-
SSDEEP
3072:5MSQ+K1uzhv/9qrEinhM1lEiHg9q9Gu0dQrQCH:5Y+KMzp/9KE1lEiHoqQnLCH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b9d0b6d492557421c1245f729f7a97e
Files
-
5b9d0b6d492557421c1245f729f7a97e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE