Static task
static1
Behavioral task
behavioral1
Sample
d5dbe0162c106d09751c0630aa140ad3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5dbe0162c106d09751c0630aa140ad3.exe
Resource
win10v2004-20240226-en
General
-
Target
d5dbe0162c106d09751c0630aa140ad3
-
Size
68KB
-
MD5
d5dbe0162c106d09751c0630aa140ad3
-
SHA1
72d9c57dba0dc5912cd26fd103d0d9e03e72b637
-
SHA256
e441f3e0421af85ec7a04d114c0ad5cefd948f7730b1aae1521a645a2be3e044
-
SHA512
cfbdfd0ba4a93128e9d380b65c4e32457711278c8d7aaeb6f5cb97262b0819d98f05f3acbe2f683f0a204aa7860effba3cbd2e2f6eef89b85b4574e8204744d6
-
SSDEEP
3:Gl15t/vllclYl88Lklt/akIllXtll9lltWl6aglAll/ll29Xx9kntllFll/vtlls:yniYFsw7JrlDA0i8yQQQdxxn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5dbe0162c106d09751c0630aa140ad3
Files
-
d5dbe0162c106d09751c0630aa140ad3.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE