Static task
static1
Behavioral task
behavioral1
Sample
d5522fcbadf0fc6c9c447a5028bcffae.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5522fcbadf0fc6c9c447a5028bcffae.exe
Resource
win10v2004-20240226-en
General
-
Target
d5522fcbadf0fc6c9c447a5028bcffae
-
Size
372KB
-
MD5
d5522fcbadf0fc6c9c447a5028bcffae
-
SHA1
5320947d27e2e6deec1e5f51ee1937f6316c127e
-
SHA256
383eab6addc0ee8b9f02f6922c649e5b589ffc229503a3599342b026bfa48892
-
SHA512
bac3db226346b1f982afb76b8521e7627bd4c1795750cbb33f0b4e5ef002ad4ba1d42350cb1cf38640a295452fe6bd531758892b921a63d793a214837370a01c
-
SSDEEP
6144:rzMIz6xsnyhMipz/MF8yP0qm2xYIiCLUrkcHpPU6RcdUD8Pac2g8ZkvBOb:3C8czG8Nqm2xPiCLKke7cLPx270O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5522fcbadf0fc6c9c447a5028bcffae
Files
-
d5522fcbadf0fc6c9c447a5028bcffae.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 39KB - Virtual size: 460KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
linux Size: 328KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE