Static task
static1
Behavioral task
behavioral1
Sample
5b72cd1ac3c7e74c886d39f9a18a969ff874649a178aa5627c3cda04afd8a0bd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5b72cd1ac3c7e74c886d39f9a18a969ff874649a178aa5627c3cda04afd8a0bd.exe
Resource
win10v2004-20240508-en
General
-
Target
5b72cd1ac3c7e74c886d39f9a18a969ff874649a178aa5627c3cda04afd8a0bd
-
Size
400KB
-
MD5
4c9aaae84fa8a5c40def7327829e1da9
-
SHA1
f092a5ed7e343765a8c4eb222466c8d14191f797
-
SHA256
5b72cd1ac3c7e74c886d39f9a18a969ff874649a178aa5627c3cda04afd8a0bd
-
SHA512
25f575dae7ec49dee11fb0bc8b00492dbc287ca5e3f3835b14f13858dca0b6796efcad83bdd51b823ac30a0e2b915aab33dded0d7d17996309db8016001b17d9
-
SSDEEP
6144:leXt/UvOxRq7RYjAW6icchUkmrLmbmk3AYFIkFrIHE8jC4GU34UYW66:l8lrAYsW6ipLGqV3AYFius3566
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b72cd1ac3c7e74c886d39f9a18a969ff874649a178aa5627c3cda04afd8a0bd
Files
-
5b72cd1ac3c7e74c886d39f9a18a969ff874649a178aa5627c3cda04afd8a0bd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE