Static task
static1
Behavioral task
behavioral1
Sample
c5192dc1af08a29518454c801b0ffe78.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c5192dc1af08a29518454c801b0ffe78.exe
Resource
win10v2004-20240226-en
General
-
Target
c5192dc1af08a29518454c801b0ffe78
-
Size
40KB
-
MD5
c5192dc1af08a29518454c801b0ffe78
-
SHA1
1ded264703d4d6d97ef656aa7f381bdeb9797741
-
SHA256
3ecad21725f7e59e8125b80da847e43be0fe8b75c70fb2bb98c2624e798cd6f5
-
SHA512
089164068e15150541ab416a0c86aa87a1ae8cb68b0825b53464b3c544c0e64ad360525f8da17fdd861f01038e0427a46092eb490474578904b12461b80c3505
-
SSDEEP
768:Kg/R1L4tJDGSm9v4Ruf2PT4VoNjclW6WYsXcukTFJrZ/dlsG0Fwtd4cOuzN:v/R1eJDzm97pFqDeF/dvp74crzN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5192dc1af08a29518454c801b0ffe78
Files
-
c5192dc1af08a29518454c801b0ffe78.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 136KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 222KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE