Static task
static1
Behavioral task
behavioral1
Sample
p3dv5kg.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
p3dv5kg.exe
Resource
win10v2004-20240226-en
General
-
Target
p3dv5kg.exe
-
Size
557KB
-
MD5
b63922b2bcb8dda070bd084972cfd07f
-
SHA1
c717e015bc7a19103f980114215b1be54aadd1f3
-
SHA256
4c226b19f20822ecbddf24bf4a435b42889c86882ce84517874eec60a6adec42
-
SHA512
bd9f0fb7e3dd4e15f7a25778f29f306a995adf15d3630a9529fd5894d740eb3d6d2d1f0f9d5734713e160135af08702976ecf9513ae159d133904d625d31c78c
-
SSDEEP
12288:oI/qIXJFQNH1nvVZx4XUsqy0oHYic3BqcMU1BJHnbkK/xgAx9/x7r:o3I5S1nvJbsJ0eYJ3AVmBJHbkK/xgAxv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource p3dv5kg.exe
Files
-
p3dv5kg.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 531KB - Virtual size: 531KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ