Static task
static1
Behavioral task
behavioral1
Sample
5bf9651724c9e55edb13556538169bef788c46e95cf4b3a93b70c6d227db6e5c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5bf9651724c9e55edb13556538169bef788c46e95cf4b3a93b70c6d227db6e5c.exe
Resource
win10v2004-20240226-en
General
-
Target
5bf9651724c9e55edb13556538169bef788c46e95cf4b3a93b70c6d227db6e5c.exe
-
Size
682KB
-
MD5
fafc4f0c52e81e988013be73216dc752
-
SHA1
9c1c82b2226a3d0711efe37ecc0593841ba240bc
-
SHA256
5bf9651724c9e55edb13556538169bef788c46e95cf4b3a93b70c6d227db6e5c
-
SHA512
3e4a42a20010d6b0dcf2c13c33e2d0d38184963e0e7ba8c090ab5c6945f0bbf9d22ba1fb3f1f2b1d9100286eebfd9e9805e7edf8aa2c4eac84e70975bd20b08b
-
SSDEEP
12288:9AnUNOllvOCiqM8eEvgvCPecTN7CZ6Mm9FiWuR6oNpqP1JDl3L4Q+T3p3kzWrGbX:qUE/vOCiqMzEvCCPeyN7YLm/inR6orqt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bf9651724c9e55edb13556538169bef788c46e95cf4b3a93b70c6d227db6e5c.exe
Files
-
5bf9651724c9e55edb13556538169bef788c46e95cf4b3a93b70c6d227db6e5c.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 668KB - Virtual size: 667KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ