Static task
static1
Behavioral task
behavioral1
Sample
5a53056a5f8792bf52fb8d054828cabf6f5a48f083624d08b7250b77a337f7d7.exe
Resource
win10v2004-20240508-en
General
-
Target
5a53056a5f8792bf52fb8d054828cabf6f5a48f083624d08b7250b77a337f7d7
-
Size
1.9MB
-
MD5
b70d565f40b3529671d3edbef7cefa56
-
SHA1
7a4efa6e8b8b83add1c7aad632a6bda90f311907
-
SHA256
5a53056a5f8792bf52fb8d054828cabf6f5a48f083624d08b7250b77a337f7d7
-
SHA512
b43918973bd37163b66e89ac64f71ae418215209fcc3dcde360eb3200daaa9e5bd25e36cd3f844809b4f711da372a444c54a477ed1031e7626ea4f1a4c0b8ff8
-
SSDEEP
49152:CdKfTn6vyJtTF+TxMoxc1TU+j+dAzGwlrh:CdKfTn5tIuoITsdZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 5a53056a5f8792bf52fb8d054828cabf6f5a48f083624d08b7250b77a337f7d7
Files
-
5a53056a5f8792bf52fb8d054828cabf6f5a48f083624d08b7250b77a337f7d7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 464KB - Virtual size: 463KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ