Static task
static1
Behavioral task
behavioral1
Sample
5bc32074e3671c75536bb7d027b33499.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5bc32074e3671c75536bb7d027b33499.exe
Resource
win10v2004-20231215-en
General
-
Target
5bc32074e3671c75536bb7d027b33499
-
Size
517KB
-
MD5
5bc32074e3671c75536bb7d027b33499
-
SHA1
88730ab83ae4f0116518c4254f924b0233d1f61b
-
SHA256
8b3134c952435ab44edf9faaa8b1b65eb1261a4616770e76dc287ddc2bc623b2
-
SHA512
4a4aec3c7bea09d52667190da6fb3ac34c129c52694b3815609c6ccdb9df3a9a7c04383a3a0f40f7047f50c92f789bffb4d76add3bc13c40fd86b2a3fe8845a0
-
SSDEEP
6144:zHjHqSyR5o74XD/IfjogHrLp0tDoL1r8ZzBSsc1NsEk8zBkulAZwS5A0EHgswZz1:HHqSw5oANgHZbL1oc1KEyuv5Kr9v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bc32074e3671c75536bb7d027b33499
Files
-
5bc32074e3671c75536bb7d027b33499.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 432KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ