Static task
static1
Behavioral task
behavioral1
Sample
5bdb42e63506c3fa0b6ba5068cd187c6e271400801ff9fee8125310ab15ec740.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5bdb42e63506c3fa0b6ba5068cd187c6e271400801ff9fee8125310ab15ec740.exe
Resource
win10v2004-20240508-en
General
-
Target
5bdb42e63506c3fa0b6ba5068cd187c6e271400801ff9fee8125310ab15ec740
-
Size
5.3MB
-
MD5
8b300116dc464770b707c27b953e12fc
-
SHA1
b276b972268c48e5af25befe0ecd820eb94ea5e5
-
SHA256
5bdb42e63506c3fa0b6ba5068cd187c6e271400801ff9fee8125310ab15ec740
-
SHA512
b597f7497dd50e70ea0f728aef6d5cf4f1a0e95aca54e4e24c309b022e1efb6d6539275fbab2db75f43ccdc072fc7dcded18f68477be5950ed0f0df896c7b6ac
-
SSDEEP
49152:9KXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXv:G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bdb42e63506c3fa0b6ba5068cd187c6e271400801ff9fee8125310ab15ec740
Files
-
5bdb42e63506c3fa0b6ba5068cd187c6e271400801ff9fee8125310ab15ec740.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.orpc Size: 7KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 11KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 24KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE