Static task
static1
Behavioral task
behavioral1
Sample
5988d0069e4f0912d85fe1d34dc5382259608486da78556f2822e9813f4843a8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5988d0069e4f0912d85fe1d34dc5382259608486da78556f2822e9813f4843a8.exe
Resource
win10v2004-20240226-en
General
-
Target
5988d0069e4f0912d85fe1d34dc5382259608486da78556f2822e9813f4843a8
-
Size
14KB
-
MD5
0d026f993442c2744b3eb22ae4ce05aa
-
SHA1
2a5159eec7e3575e2ae16ce52c22acdf1cfe0b10
-
SHA256
5988d0069e4f0912d85fe1d34dc5382259608486da78556f2822e9813f4843a8
-
SHA512
7d3353ab8e7720e4ef09e228ce7c587c5035a13b71d6885d3bdb10ff96c0ac6b8b636fe5d69ec41e42056984cd34b79e1d335cd2989e54f7b5af692e61fc5157
-
SSDEEP
384:FFn/vTuBcIBrm+xP/6nLLxP/NDE045H622:zruWIQ+x6fh/9AM22
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5988d0069e4f0912d85fe1d34dc5382259608486da78556f2822e9813f4843a8
Files
-
5988d0069e4f0912d85fe1d34dc5382259608486da78556f2822e9813f4843a8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ