Static task
static1
Behavioral task
behavioral1
Sample
d5dc49e0cd29104ceb32910714ab3f51995f6e9e8e8d08bbaf72c9d216da1949.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
d5dc49e0cd29104ceb32910714ab3f51995f6e9e8e8d08bbaf72c9d216da1949.exe
Resource
win10v2004-20240508-en
General
-
Target
d5dc49e0cd29104ceb32910714ab3f51995f6e9e8e8d08bbaf72c9d216da1949
-
Size
4.2MB
-
MD5
23899a9ab64daf854d16fd7f1f51ee16
-
SHA1
80961f3be25109e34e8e893e01f3dd29823c4a71
-
SHA256
d5dc49e0cd29104ceb32910714ab3f51995f6e9e8e8d08bbaf72c9d216da1949
-
SHA512
ebf6bb9a77694baa03a484434a85f527a95fba44b5369bc8a185f2c8a19e05ca7f139c43ae2e615cf56fed3be45a7f8778971035d13c850b4922119f0d51d5ac
-
SSDEEP
24576:gTe+CEMytR6jYSe6CEW+p7q4QJXHAClUciT1GWbWN:gl6Bq4sQoN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5dc49e0cd29104ceb32910714ab3f51995f6e9e8e8d08bbaf72c9d216da1949
Files
-
d5dc49e0cd29104ceb32910714ab3f51995f6e9e8e8d08bbaf72c9d216da1949.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4.2MB - Virtual size: 25.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE