Static task
static1
Behavioral task
behavioral1
Sample
5bd7fa7b45dc9808310bd79e517d0214.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5bd7fa7b45dc9808310bd79e517d0214.exe
Resource
win10v2004-20231215-en
General
-
Target
5bd7fa7b45dc9808310bd79e517d0214
-
Size
122KB
-
MD5
5bd7fa7b45dc9808310bd79e517d0214
-
SHA1
cd6f7554943e34b0ac9b4f946ce05866923d4c61
-
SHA256
6da992bf954a19b6e1204d54041832951ba322e8e34eff78b7b3a7fe973ee436
-
SHA512
047abf45885a27d66dd2535f7290383dd3d12aa3a923d75d96f6c1e0a0050828ad6732859d55ac2a71b8f5466ebdda586a3a202d3fa6aff67a0e76f3b5ef7d56
-
SSDEEP
3072:KPJkfTmzpRvC1U2cDO5JZu4nsiBc7BhrSL7o2IKECUzy7a8iBk:QKfspcq2cCNuEBChr6MmECUzy7qBk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bd7fa7b45dc9808310bd79e517d0214
Files
-
5bd7fa7b45dc9808310bd79e517d0214.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
w Size: - Virtual size: 100KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yu Size: 116KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4nipam9 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE