Static task
static1
Behavioral task
behavioral1
Sample
d5dd3e56839060638b6e3a64d283b53f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5dd3e56839060638b6e3a64d283b53f.exe
Resource
win10v2004-20240226-en
General
-
Target
d5dd3e56839060638b6e3a64d283b53f
-
Size
618KB
-
MD5
d5dd3e56839060638b6e3a64d283b53f
-
SHA1
15b8247b19b0dc14f91b368dd5693356feec3f97
-
SHA256
065311c966faa183a78c4e5d0257783b984a218d5aa43150efdf49281e502e8d
-
SHA512
5d31551dc98acd8c461403d1ac78f368692e4781a99413a8512d2389da91702a4624eceea5b6e470a95c255529704b4d27123a338033700278101ebe174948f6
-
SSDEEP
12288:v3raczxw00NcO3vzQ5gLDTNmuRvfVSbMFkigAAyqHerjkctfK17jUeSfcxJ9BXM:AzvTNmUKJNydrjkcRKVIeSfcfI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5dd3e56839060638b6e3a64d283b53f
Files
-
d5dd3e56839060638b6e3a64d283b53f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 600KB - Virtual size: 598KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 281KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ