Static task
static1
Behavioral task
behavioral1
Sample
d5fb0548fa5a33f62c494b7413026c42.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5fb0548fa5a33f62c494b7413026c42.exe
Resource
win10v2004-20240226-en
General
-
Target
d5fb0548fa5a33f62c494b7413026c42
-
Size
1.0MB
-
MD5
d5fb0548fa5a33f62c494b7413026c42
-
SHA1
0c9a1ba1a79026043a9cbe8b1ebd590088eb3c0b
-
SHA256
e10c5210a74d5552cb3266d243e03357698c5fdbacb6d9de3efdc39d64ba52b8
-
SHA512
e6def025a58a0f5ad2d72e6bc654c08e9c4c3b2a1c505ae0e187766450dbbaa73c5f468b9dccdaa8cc132549fc7aa9f698140d2abd3291378d3c5102b6a7eaf7
-
SSDEEP
24576:Brngn6OREGrRexKMuoN8Mp5n3CLM9AFlbTPnmjTkj:NEvREyIxDui8Mp5n3zCFl3P4I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5fb0548fa5a33f62c494b7413026c42
Files
-
d5fb0548fa5a33f62c494b7413026c42.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 152KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 984KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bnyytndd Size: 732KB - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wwxagyib Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE