Static task
static1
Behavioral task
behavioral1
Sample
5bd3326716db82d6570dfb3565224d5e5081a0a70d3ed4998e36c9f09c79507e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5bd3326716db82d6570dfb3565224d5e5081a0a70d3ed4998e36c9f09c79507e.exe
Resource
win10-20240404-en
General
-
Target
5bd3326716db82d6570dfb3565224d5e5081a0a70d3ed4998e36c9f09c79507e
-
Size
4.8MB
-
MD5
c39e4bdeb8bd0578884fab418488ece5
-
SHA1
6bb278e44b700267152c954042411b2c197018ea
-
SHA256
5bd3326716db82d6570dfb3565224d5e5081a0a70d3ed4998e36c9f09c79507e
-
SHA512
b5d1deb05de45ad5b4386eae98f8837a873eab6dadd6c9996cee178204e40ab261ea0a57b7be903b0f0a85e89954284e46489afb724c1c920a7129ac79959d91
-
SSDEEP
98304:mq1ur6DMT43CRkH97EEjYsvMYGQM5ScV4FTXlXfl4fZn2IMMM:9Ik59EMM8u4FxXfl47Mv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bd3326716db82d6570dfb3565224d5e5081a0a70d3ed4998e36c9f09c79507e
Files
-
5bd3326716db82d6570dfb3565224d5e5081a0a70d3ed4998e36c9f09c79507e.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ