Static task
static1
Behavioral task
behavioral1
Sample
f5831b9ca58c6065e7b64d17d2945292f132fefcb1648bec7d2593878e3b0d0d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5831b9ca58c6065e7b64d17d2945292f132fefcb1648bec7d2593878e3b0d0d.exe
Resource
win10v2004-20240508-en
General
-
Target
f5831b9ca58c6065e7b64d17d2945292f132fefcb1648bec7d2593878e3b0d0d
-
Size
119KB
-
MD5
56c2c1ed6893960b51ed042117625d20
-
SHA1
865f52ec94fbc9c94619deb132189f057757184f
-
SHA256
f5831b9ca58c6065e7b64d17d2945292f132fefcb1648bec7d2593878e3b0d0d
-
SHA512
4602807fd7ce9e76e13d87bb8e547d88812a4ebfb28dd7d72a735cbfac19cb2ae9edd8607bef6a11067fdad1bf2a03a7e1c7e1f612872a102d03596753564298
-
SSDEEP
768:pAo6hnZrJaDTavVOmNziZoDhfTbkq+/SD1c7cniYs2sgALvv:pb6Molkq+S5tnCvv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5831b9ca58c6065e7b64d17d2945292f132fefcb1648bec7d2593878e3b0d0d
Files
-
f5831b9ca58c6065e7b64d17d2945292f132fefcb1648bec7d2593878e3b0d0d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 63KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE