Static task
static1
Behavioral task
behavioral1
Sample
5c2f61033c14479c778e96a305281d2e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5c2f61033c14479c778e96a305281d2e.exe
Resource
win10v2004-20231215-en
General
-
Target
5c2f61033c14479c778e96a305281d2e
-
Size
43KB
-
MD5
5c2f61033c14479c778e96a305281d2e
-
SHA1
24e2b8cc1d402b2333b96dc9b780104bd79983e2
-
SHA256
3d09c8d9d7f06dd9e67ad95a5e1bc1e74915575625e8b12fb2129743264b0746
-
SHA512
0d8e0bb210a0eacaebe8d2763dfc9352edb948d75e80d0760c9ee1fea34e6e4203bc2561dcaf4687e949d2e136be7f5e75438abf7fed385426453eb56e00e51c
-
SSDEEP
768:t3TeENVHR8zENvSBCIr44FdINdMokgnT0vDmFagPVP6NQi/Zc+sJy6bN2a0UQ:xTOzENvSMIrFdfrikD0agPVPOQsJwy63
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c2f61033c14479c778e96a305281d2e
Files
-
5c2f61033c14479c778e96a305281d2e.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 42KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE