Static task
static1
Behavioral task
behavioral1
Sample
5c13c8665237ce1d5864ba644f8dbb9755d6e936ead6386d2f815d6312bc6858.exe
Resource
win7-20240221-en
General
-
Target
5c13c8665237ce1d5864ba644f8dbb9755d6e936ead6386d2f815d6312bc6858
-
Size
65KB
-
MD5
07a98ea2c5eafae5d2f31261a0a2a2eb
-
SHA1
a7eec28343f66755f1f6518a3436d3489c3a70e6
-
SHA256
5c13c8665237ce1d5864ba644f8dbb9755d6e936ead6386d2f815d6312bc6858
-
SHA512
e6962c43f93408a1336e27fb1c705b058a4abf8a4f7f9821ab3d390b9f94397d091283338f1aae1df657d90d15e9f74d55c7ca9d2f862be034343dfda867da30
-
SSDEEP
1536:2KtQ2tXQsf0zaKCYE0igDWg7lqGCyOIXkuCnn:pa2ptfKCYIBG5RCnn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 5c13c8665237ce1d5864ba644f8dbb9755d6e936ead6386d2f815d6312bc6858
Files
-
5c13c8665237ce1d5864ba644f8dbb9755d6e936ead6386d2f815d6312bc6858.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE