Static task
static1
Behavioral task
behavioral1
Sample
5c890ad2d645cd441de25f5b9de465b307ef4321ab81420342f4493e799deaf3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5c890ad2d645cd441de25f5b9de465b307ef4321ab81420342f4493e799deaf3.exe
Resource
win10v2004-20240508-en
General
-
Target
5c890ad2d645cd441de25f5b9de465b307ef4321ab81420342f4493e799deaf3
-
Size
674KB
-
MD5
11ec1f84af4dedb67694163e4b03464e
-
SHA1
bd4b6eca3f00eaf3df155838a1af1aa622af9a44
-
SHA256
5c890ad2d645cd441de25f5b9de465b307ef4321ab81420342f4493e799deaf3
-
SHA512
1106afdac10ea03efac5db8576b35fe2d2594664584e276a383202615902000c6850bb3384398a5fd4cb52a2dd4ae24d69158b00fb03e539b6245af0c7b1ffbe
-
SSDEEP
12288:O43R+xfofR3PBrhGLxe0DJC2z97xNKF+ygpa0L708uae7D3cdW:O2R+xfofR3PBrux7DJCit/KgFpXY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c890ad2d645cd441de25f5b9de465b307ef4321ab81420342f4493e799deaf3
Files
-
5c890ad2d645cd441de25f5b9de465b307ef4321ab81420342f4493e799deaf3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 584KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 422KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 360B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 238KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ