Static task
static1
Behavioral task
behavioral1
Sample
d5c271bfc291b1b7080ecfc3f506c6ec.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5c271bfc291b1b7080ecfc3f506c6ec.exe
Resource
win10v2004-20240226-en
General
-
Target
d5c271bfc291b1b7080ecfc3f506c6ec
-
Size
47KB
-
MD5
d5c271bfc291b1b7080ecfc3f506c6ec
-
SHA1
2189654a8f0d86276a360889f1a8ecb3084a151a
-
SHA256
24870459812123a2530e1043dd119527bf6124e3a3a9316dbac33a70c88e4ea8
-
SHA512
dc339f251c7ed5b9011aef7f4c5a867000678b752f3c4b2cb0243e6d00540cdb80935b5f16ada2a91562de8db706dd804eebafbb13457578a12e9a046cc0f033
-
SSDEEP
384:H1JqPBbVy5KkfxRCb45C810rqxtHmK3FMkYpcT6QNBOMR:H1JgBZZkfxRC85CqOqxIKbOAbOMR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5c271bfc291b1b7080ecfc3f506c6ec
Files
-
d5c271bfc291b1b7080ecfc3f506c6ec.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ