Static task
static1
Behavioral task
behavioral1
Sample
5c052704921d44d6d9c1d4b53c444c42.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5c052704921d44d6d9c1d4b53c444c42.exe
Resource
win10v2004-20231215-en
General
-
Target
5c052704921d44d6d9c1d4b53c444c42
-
Size
268KB
-
MD5
5c052704921d44d6d9c1d4b53c444c42
-
SHA1
cfd2c584252a932d5b9755bbb2e346fe71c8c8f1
-
SHA256
7b9e8502f1b48a335c63db15b3dffbd3cb768695c74fb062e879d7ad54a70d66
-
SHA512
54972aea45e2d4598389719223db32371956ee34b8fc831a7eb1f140a57762e1979c6d960e01f1df2e9978599d2cb9b74ed1f4365e2f4ab4862ba38e3d93edff
-
SSDEEP
6144:EB/6G09TFNUCrAp80Vdls63+BfCmIgOs6q6ab0TU2h3KCw4:ExIUgApqASOggeo3Mu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c052704921d44d6d9c1d4b53c444c42
Files
-
5c052704921d44d6d9c1d4b53c444c42.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
packerBY Size: - Virtual size: 688KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 261KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE