Static task
static1
Behavioral task
behavioral1
Sample
5c1e61e6b77e599c5229a3f315791f37.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5c1e61e6b77e599c5229a3f315791f37.exe
Resource
win10v2004-20231215-en
General
-
Target
5c1e61e6b77e599c5229a3f315791f37
-
Size
385KB
-
MD5
5c1e61e6b77e599c5229a3f315791f37
-
SHA1
08558246cf167df0b4e524f8fff54cb2ca5af756
-
SHA256
3b92c06224c5647f5c011da3843c1aad6c3977808d70420a195ae99aa91a4836
-
SHA512
ef91b6ea644cd274ee3fc6f298b6474d48d3533bdc8653b0653ce255aa5e38aa9c85865712d7179c39e2b004996ce0c4bae49b5da0ee0f0bc346e728a1120705
-
SSDEEP
6144:Ft1mE7nEDZzkKwmX3gx2aaZXUzHgNB5iWqpp/exZeLJKc8MUHYuMvB:71mE7nEDuKwmngx2TZGANri9eG4ciWB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c1e61e6b77e599c5229a3f315791f37
Files
-
5c1e61e6b77e599c5229a3f315791f37.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ