Static task
static1
Behavioral task
behavioral1
Sample
d5d493f6c9d50b59e8a6256405d766bb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5d493f6c9d50b59e8a6256405d766bb.exe
Resource
win10v2004-20240226-en
General
-
Target
d5d493f6c9d50b59e8a6256405d766bb
-
Size
49KB
-
MD5
d5d493f6c9d50b59e8a6256405d766bb
-
SHA1
cfc5a7b8a735b0da9d3a59f17f67da2d9bdb7b18
-
SHA256
1b2151646765d389c69a4d029c680629ef0ffd8a867f1b1ea269656e63052a2c
-
SHA512
e80870db77b3fc09b52431b38dca3b22f6892f68cec8a1248a2a103c81649ef2c588ebde0f3845ff21982cae40787a5acc7335f69d9989a6eb179ba77968ce6f
-
SSDEEP
768:EyW1yBtObv0U/xwPp0EoooiYECG2nZF5sZVcmxU:24Bobv7aB0EooYEC3rUVcYU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5d493f6c9d50b59e8a6256405d766bb
Files
-
d5d493f6c9d50b59e8a6256405d766bb.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 19KB - Virtual size: 28KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coderpub Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE