Static task
static1
Behavioral task
behavioral1
Sample
5bc0065779aebabd05134bf406143ec3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5bc0065779aebabd05134bf406143ec3.exe
Resource
win10v2004-20231215-en
General
-
Target
5bc0065779aebabd05134bf406143ec3
-
Size
104KB
-
MD5
5bc0065779aebabd05134bf406143ec3
-
SHA1
493e8b4d9960bcea491bb6d5c4ea1190cafd3bee
-
SHA256
1591d5e087bec76edbc07a57c579866abaeb96be4bd536e3a131c76421a44fac
-
SHA512
d5ef59748c72a86738e698850f9b3158381784fb29b43b82eb4bbb4aea7c8d1be281bc213527fb6a194164753f147e7e5c03b144374e4011843e1c2a5d9660b4
-
SSDEEP
1536:/Puz9COZZUTfW4CnRfyFKFiq4tKhMVtitUdVUpn7K5Y4CuSiRLfEtU7wJhE9tNgS:Oz0qkfWZnDIKe55YxuHLMtU7wPEys4I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bc0065779aebabd05134bf406143ec3
Files
-
5bc0065779aebabd05134bf406143ec3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ