Static task
static1
Behavioral task
behavioral1
Sample
5e97a4558ebdd3ec229fc6d0f39095f2b79de4e1cde190d10c46caf851f96f6f.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
5e97a4558ebdd3ec229fc6d0f39095f2b79de4e1cde190d10c46caf851f96f6f.exe
Resource
win10v2004-20240426-en
General
-
Target
5e97a4558ebdd3ec229fc6d0f39095f2b79de4e1cde190d10c46caf851f96f6f
-
Size
233KB
-
MD5
00415105bf52a936ee36e832e51173da
-
SHA1
1418e05cb3a5355b351d370641f4e39f00bd3825
-
SHA256
5e97a4558ebdd3ec229fc6d0f39095f2b79de4e1cde190d10c46caf851f96f6f
-
SHA512
3216dd04666c437504945dd38820cacdd2ee6a1502de25728a1b71fb5a51eb89a2abed371319b9bff3b8e3e89d6730163d59b82c739791c36985c41cbd1fc866
-
SSDEEP
6144:cK+/nRMYrp2wrPHRYz9fa3/Y1R6vNLdYoCV:+RMczHRipaQrf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e97a4558ebdd3ec229fc6d0f39095f2b79de4e1cde190d10c46caf851f96f6f
Files
-
5e97a4558ebdd3ec229fc6d0f39095f2b79de4e1cde190d10c46caf851f96f6f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
SVKP Size: - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SVKP Size: 225KB - Virtual size: 225KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE