Static task
static1
Behavioral task
behavioral1
Sample
b5e9a3a112c889e9afaa48926ed0bf9474fb430cc99dff8915192877f58d5efe.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b5e9a3a112c889e9afaa48926ed0bf9474fb430cc99dff8915192877f58d5efe.exe
Resource
win10v2004-20240508-en
General
-
Target
b5e9a3a112c889e9afaa48926ed0bf9474fb430cc99dff8915192877f58d5efe.exe
-
Size
836KB
-
MD5
b90266d6b73db4f10b1cc8f90a81a4aa
-
SHA1
9422dd5935c7299da1c6c8b7b5e0e9e89743ddfb
-
SHA256
b5e9a3a112c889e9afaa48926ed0bf9474fb430cc99dff8915192877f58d5efe
-
SHA512
aed559705834aedce48808f2225d2657c59ec24f2766bae56750544d9507fb47b05b8efe7690cfba769031954e6437895910828fc68a17f9b2602baa34a78828
-
SSDEEP
24576:Yw4bjw4bJWBbDcr6vNVIbKADy2VqC5yYOWMU/fpTMnp7:Yw4bjw4bARE6FWbKegCEYOWMU5TMR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource b5e9a3a112c889e9afaa48926ed0bf9474fb430cc99dff8915192877f58d5efe.exe
Files
-
b5e9a3a112c889e9afaa48926ed0bf9474fb430cc99dff8915192877f58d5efe.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 816KB - Virtual size: 815KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ