Static task
static1
Behavioral task
behavioral1
Sample
5c3a543ad0f8b828172469ee7c45a019.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5c3a543ad0f8b828172469ee7c45a019.exe
Resource
win10v2004-20231222-en
General
-
Target
5c3a543ad0f8b828172469ee7c45a019
-
Size
358KB
-
MD5
5c3a543ad0f8b828172469ee7c45a019
-
SHA1
5bbffe9054121aec6df8d51c1aade1bd068b5415
-
SHA256
75191c9b74d2202b1aa8790ef739a5d3e6cc801bac4a5ebaeaffc10a6520f49d
-
SHA512
d3e12d4e5f1d9df12b6644a4a0e5e6c583d4b86a89da3e62824ab880f684df1f14823343d36b8b7b00a6b8c95260bd573e2afe1e02c2b4386ae128c398fb1169
-
SSDEEP
6144:nk2eFDF2idZecnl20lHRxp3g1RpElPKoyUU14E1RfG5fQQG/EQ:kpFhF3Z4mxxCRp45E1RUfuL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c3a543ad0f8b828172469ee7c45a019
Files
-
5c3a543ad0f8b828172469ee7c45a019.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE