Static task
static1
Behavioral task
behavioral1
Sample
5164258993a4db297eafcd03cadafb054a9fa9bae024ea0e047917a664c5c1b0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5164258993a4db297eafcd03cadafb054a9fa9bae024ea0e047917a664c5c1b0.exe
Resource
win10-20231215-en
General
-
Target
5164258993a4db297eafcd03cadafb054a9fa9bae024ea0e047917a664c5c1b0
-
Size
513KB
-
MD5
982035bc968af21d8078f6f11d420317
-
SHA1
036d697eb600cc0c2481b112f4475de42ca389c6
-
SHA256
5164258993a4db297eafcd03cadafb054a9fa9bae024ea0e047917a664c5c1b0
-
SHA512
bd3bedd6d1c93cec19257e5bb0b994790f9d08b9f76092cd79a3a558afc884a08c6250ef1889d4eb7a6c1a6f555d00a1a48108a63072007dc9d802b91cc24055
-
SSDEEP
6144:YocuyE2Jr6MrRda+JDpGbqSXYS8dtDkUiTYb5P2N:Yobjmr6QdFJbSXgzCYb8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5164258993a4db297eafcd03cadafb054a9fa9bae024ea0e047917a664c5c1b0
Files
-
5164258993a4db297eafcd03cadafb054a9fa9bae024ea0e047917a664c5c1b0.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 251KB - Virtual size: 250KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 168B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 255KB - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ