Static task
static1
Behavioral task
behavioral1
Sample
d5eb87079b33587754cea6d4f0411b9e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5eb87079b33587754cea6d4f0411b9e.exe
Resource
win10v2004-20240226-en
General
-
Target
d5eb87079b33587754cea6d4f0411b9e
-
Size
130KB
-
MD5
d5eb87079b33587754cea6d4f0411b9e
-
SHA1
436df1306e57d5ce5423c2927adcaa008e1dae42
-
SHA256
13086d2cbcf0b0cb99f165562049f90326e0ca57b4b4b12701f393d15f08fa85
-
SHA512
48023c89de4782bf7b7820f660d3f581a83d43ba712e8e9ea839316c38259ba59965fbab599f983c03d807e73a4d33aa7759c8b3cd4a5a7f2e0ad47cd463fc95
-
SSDEEP
3072:qUboH8STGbBby9ILYmLttldTsuZVGtB6Aili9ckw6:qVVGbBbSgttldT3vGtBzicTw6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5eb87079b33587754cea6d4f0411b9e
Files
-
d5eb87079b33587754cea6d4f0411b9e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
packerBY Size: - Virtual size: 284KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bero^fr Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE