Static task
static1
Behavioral task
behavioral1
Sample
c5443392c945d488ea4565296bc06475.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c5443392c945d488ea4565296bc06475.exe
Resource
win10v2004-20231215-en
General
-
Target
c5443392c945d488ea4565296bc06475
-
Size
84KB
-
MD5
c5443392c945d488ea4565296bc06475
-
SHA1
2860e987b0f3c86679d889fc51ce0f353ba01844
-
SHA256
b7960c69dfff9f9008e97c223ddb22735f1443bff2900fd4ddbaad00c07a1e95
-
SHA512
31fef3c2851152d458a74fbf10384f86ee2554caec6ea5b5cdcdd1979700fad5dd8cab6c5d4fe31b35910284138d6bfa1a72c6176ef47ad377d94d8346023d6c
-
SSDEEP
1536:EqaImMEeqvwUYc521jk0FYu5+XWiaVvTiuxV5v:zaI5Ee4FYI21jRYb/yek1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5443392c945d488ea4565296bc06475
Files
-
c5443392c945d488ea4565296bc06475.exe windows:4 windows x86 arch:x86
de39dc68941cc6307e3b2590c857a907
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
user32
wsprintfA
advapi32
RegCloseKey
ole32
OleRun
Sections
.text Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 996B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.adata Size: 68KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE