Static task
static1
Behavioral task
behavioral1
Sample
c5b6e2c127175014cc1fe7196f6342b9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c5b6e2c127175014cc1fe7196f6342b9.exe
Resource
win10v2004-20240226-en
General
-
Target
c5b6e2c127175014cc1fe7196f6342b9
-
Size
903KB
-
MD5
c5b6e2c127175014cc1fe7196f6342b9
-
SHA1
87b1cfad04457a87b17273d4913e52fec5e0f01f
-
SHA256
dc792fb8d8b6769e0fc297b6c054b7c2a4923bd51d25073997a0aca13236c932
-
SHA512
9b93cfabd868b6b991715fdff76efa5ff8801adbd6e733c63a8a7f5bfcea09ce6000d7fe17e4035edd828ae443dcbbaaca4284298f27b2af98714b89a228d4d6
-
SSDEEP
12288:CRpKKXuXjdhrSsqpNVZzFk5ecAIFZEciLEs14dL+ujs/crizjb9C0EG+tDS0sG78:cp3XU03pvXcTWu+ujlib1qh8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5b6e2c127175014cc1fe7196f6342b9
Files
-
c5b6e2c127175014cc1fe7196f6342b9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE