Static task
static1
Behavioral task
behavioral1
Sample
d5bed9ba81c2ef0ce498e591482dcf49.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5bed9ba81c2ef0ce498e591482dcf49.exe
Resource
win10v2004-20240226-en
General
-
Target
d5bed9ba81c2ef0ce498e591482dcf49
-
Size
66KB
-
MD5
d5bed9ba81c2ef0ce498e591482dcf49
-
SHA1
c0a730401246287b038ea7217631a3452035599d
-
SHA256
2d3a435fda8d575026ea75dfc0fda3d2e382b81969ac71c768844ece96ae0111
-
SHA512
a50192c44893b4564e7405a2bc115d3b60af4b881b4d4633804ae0f930874feb0bd01bbc0aee3903a3a4cd6a5268db6445cb324f525d056a437f69bdec3e81b6
-
SSDEEP
192:HKxx5vW9JmIXR6FK2fM8D7PJEPfrDOwNNBTgrTDFUBLSNIN0R+d:qxx56JfsTMQJELD1NBuUBSNINZd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5bed9ba81c2ef0ce498e591482dcf49
Files
-
d5bed9ba81c2ef0ce498e591482dcf49.exe windows:4 windows x86 arch:x86
3cd3aba06a71a3fd4726d5e3e8f25b85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
ExitProcess
Sections
.text Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE