Static task
static1
Behavioral task
behavioral1
Sample
5c097f0083e49e40afc6bdc7b1f5c285.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5c097f0083e49e40afc6bdc7b1f5c285.exe
Resource
win10v2004-20231215-en
General
-
Target
5c097f0083e49e40afc6bdc7b1f5c285
-
Size
2KB
-
MD5
5c097f0083e49e40afc6bdc7b1f5c285
-
SHA1
05574fcef5093063250f9f0171daa700e3fa952d
-
SHA256
134ed50aaf410eacafd5ee0d7770ac4b474b8809a2200407a3dfe2f6237ee039
-
SHA512
9232a79122b782afd7b071da9f018c3a41157f9ecc5c323ead813a0e58522c509705f842f9716e91bb322ece0d833dffaa44a503303f18c0a25f370c83019b6b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c097f0083e49e40afc6bdc7b1f5c285
Files
-
5c097f0083e49e40afc6bdc7b1f5c285.exe windows:4 windows x86 arch:x86
85878ddbbdfa8920c009d5aa2efacde8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
VirtualLock
ExitProcess
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 160B - Virtual size: 130B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ