Static task
static1
Behavioral task
behavioral1
Sample
f5d2ae2633a360d77cc27c9f85ec7f64cacc642e53a01451a2dc456b9f492853.exe
Resource
win7-20231129-en
General
-
Target
f5d2ae2633a360d77cc27c9f85ec7f64cacc642e53a01451a2dc456b9f492853
-
Size
563KB
-
MD5
b0b84b3671a667f9bdb30e2b656abf5f
-
SHA1
cf584c3cb1b4087555d0e16cae191a994b192320
-
SHA256
f5d2ae2633a360d77cc27c9f85ec7f64cacc642e53a01451a2dc456b9f492853
-
SHA512
c99ba1e9136527049c20559cff8e1d0f36d775ab54efed97c728ebd04d15f2c197553b8bb4914e547ac462b4747a60fc44822d098b7b3c0659c4464354a47797
-
SSDEEP
12288:w3Nbpc9iJafmm2VYK+UNo0RweQfoAxHv9sN4A4H9J618UtQ43iUa:w3NXVm2VZQwy9E1Vf3M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5d2ae2633a360d77cc27c9f85ec7f64cacc642e53a01451a2dc456b9f492853
Files
-
f5d2ae2633a360d77cc27c9f85ec7f64cacc642e53a01451a2dc456b9f492853.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE