Static task
static1
Behavioral task
behavioral1
Sample
5853a02c6e338153533365956b57b92a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5853a02c6e338153533365956b57b92a.exe
Resource
win10v2004-20231215-en
General
-
Target
5853a02c6e338153533365956b57b92a.bin
-
Size
1.4MB
-
MD5
5853a02c6e338153533365956b57b92a
-
SHA1
6584cbccfa9f024977b8df2ae9fa84fc15f309df
-
SHA256
68e115a8e38ee2da5d40f45472e9af91009e4e4d674eeead2e7ff3fe50b550ef
-
SHA512
8ed4f6b0e3d87a618721aed406c7d18f3d661c56e9d51463be5827880db262896f0b89555bf6bf43e212cdcfe6f1044c5ccf416377a9b7f9d68e273c5b173187
-
SSDEEP
12288:ZVVefpNccbdxoHo62Iz7lYJ+y2lt5yZkoHyJTydUf/W4U/lEEG3q2u:ZVVAfxa32U7lYJ+yBNl4UNZG3q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5853a02c6e338153533365956b57b92a.bin
Files
-
5853a02c6e338153533365956b57b92a.bin.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.clam01 Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam02 Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam03 Size: 496KB - Virtual size: 496KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam04 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE