Static task
static1
Behavioral task
behavioral1
Sample
5c324e2a4c9218c13ddbbec4cbfb64e9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5c324e2a4c9218c13ddbbec4cbfb64e9.exe
Resource
win10v2004-20231215-en
General
-
Target
5c324e2a4c9218c13ddbbec4cbfb64e9
-
Size
356KB
-
MD5
5c324e2a4c9218c13ddbbec4cbfb64e9
-
SHA1
f907ff81c0adb03da885c73ad0079015db306bcc
-
SHA256
c48b130443cfe1af0560394c436271b2d309e720c12fedbdb9553808072311aa
-
SHA512
a6c48e82244fd5e8bd2b72ecac2cf85c31ef3120a5174dad9cabf13dccadc363dd75feca349eadf24fb306d8f5376a19038cb563eba24078a5caa868fa667fc6
-
SSDEEP
6144:WV3x5nnEnHbt1cNwPLvoqg0R2VhPefm0TosGWi2vz0PqJ15oEInSev9eE:WPxEn7t1c2obY7K+vT1549eE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c324e2a4c9218c13ddbbec4cbfb64e9
Files
-
5c324e2a4c9218c13ddbbec4cbfb64e9.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 92KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 261KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE