Static task
static1
Behavioral task
behavioral1
Sample
5bf3306f07ed4e62577f2261ac7eb513.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5bf3306f07ed4e62577f2261ac7eb513.exe
Resource
win10v2004-20231215-en
General
-
Target
5bf3306f07ed4e62577f2261ac7eb513
-
Size
2.5MB
-
MD5
5bf3306f07ed4e62577f2261ac7eb513
-
SHA1
ef50949772cbe9152f86f08c3f17c8ed1ca061f1
-
SHA256
5e336726d1f24a071a585d70d377b5f64624c6c2bf6e5522c6460390c2da1306
-
SHA512
f4f0d671cea76516206917e9b720aaab6c844a9ec3801d6617b47d741f6187575b2837116f01a41b530a76f310a6e2080fd87673b013409f4b308b5d078ec5fb
-
SSDEEP
49152:W2KPzvoS7nF2KPzvoS7nyHF+3j5D78OBU:GzwsntzwsnSCs1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bf3306f07ed4e62577f2261ac7eb513
Files
-
5bf3306f07ed4e62577f2261ac7eb513.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ