Static task
static1
Behavioral task
behavioral1
Sample
d5a04d0d4a7ef063b2fa8322cb07cac1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5a04d0d4a7ef063b2fa8322cb07cac1.exe
Resource
win10v2004-20240226-en
General
-
Target
d5a04d0d4a7ef063b2fa8322cb07cac1
-
Size
25KB
-
MD5
d5a04d0d4a7ef063b2fa8322cb07cac1
-
SHA1
0a4c19cb6d3ced53f8d9212228dfa825327e5bf0
-
SHA256
e6f9519ad55b5c2b030e6ca15c74a923136bd5542fb3e682048bcdc17cb5f025
-
SHA512
58a753f9fb2c3e89492da035d748297efef1712aa97ab1037c61d768c6e4eeda16c620542dc7c409be02668814f80f2ee400609cd596363a63a6896369120c85
-
SSDEEP
768:ecxzoLbQvbuFutQynAa2/CdeSf4di+d9/+:VUYCzNf8slD2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5a04d0d4a7ef063b2fa8322cb07cac1
Files
-
d5a04d0d4a7ef063b2fa8322cb07cac1.exe windows:4 windows x86 arch:x86
d76f4237a8ae158292f09835997a1d9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
Sections
�#C�$� Size: - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�DK��.Tl Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
19b�K Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ