Static task
static1
Behavioral task
behavioral1
Sample
5c2bf434c87c744d4c8501e94b334613.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5c2bf434c87c744d4c8501e94b334613.exe
Resource
win10v2004-20231215-en
General
-
Target
5c2bf434c87c744d4c8501e94b334613
-
Size
1024KB
-
MD5
5c2bf434c87c744d4c8501e94b334613
-
SHA1
66e3ac67cafaaea27c8f47340d0f19681b88eb10
-
SHA256
e48cbc46c156ecfc03050954417d3e28b50718f2fc2a047dd127dc920fa6d75e
-
SHA512
e408f48d31edc124b0ddbdd79233af67d517bc265da8f486bf776f86ffc7196a3e492476b9da18dd72420b33704196442e3704a4654d5539523174071a586f01
-
SSDEEP
24576:zh3BEhyuFEg7szOta9S8AsudQoMU9BNv1fLOLgJWqtvBUZ9AaVk:Vc37IzWIS3xdrMEfKgJWYpUZ9AaG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c2bf434c87c744d4c8501e94b334613
Files
-
5c2bf434c87c744d4c8501e94b334613.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.theta Size: - Virtual size: 360KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iota Size: 92KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE