Static task
static1
Behavioral task
behavioral1
Sample
c51856d20b882d38ec3bd0ef55bd0164.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c51856d20b882d38ec3bd0ef55bd0164.exe
Resource
win10v2004-20240226-en
General
-
Target
c51856d20b882d38ec3bd0ef55bd0164
-
Size
8KB
-
MD5
c51856d20b882d38ec3bd0ef55bd0164
-
SHA1
ed6d5ccfe8143af3784326e71c3f3ace3b121365
-
SHA256
3b33974fb132c001b9f4d19afd6f171eedf9ed79c6830b48408a28572425ed5c
-
SHA512
e8346312f51f316d57b3d57c90fc5cf3f1060e993453331a4a513014c42e7d2f5771dcdd7dd9747085620f022a43b58a63beff4f84a7dfde12e9abf44e235d44
-
SSDEEP
48:OEP75f5o4KQaKPL/aLulfddMS83wfuxBAP:nPE4KZKTS6EX/2P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c51856d20b882d38ec3bd0ef55bd0164
Files
-
c51856d20b882d38ec3bd0ef55bd0164.exe windows:1 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
EXITPROCESS
Sections
CODE Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ