Static task
static1
Behavioral task
behavioral1
Sample
51861faa58ed7b42819c9a0ab494bd446434b8b4ccb9285678ec2b796723d219.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
51861faa58ed7b42819c9a0ab494bd446434b8b4ccb9285678ec2b796723d219.exe
Resource
win10v2004-20240426-en
General
-
Target
51861faa58ed7b42819c9a0ab494bd446434b8b4ccb9285678ec2b796723d219
-
Size
80KB
-
MD5
e47db20e20cf83fe4b732d3f1157f169
-
SHA1
ea68726b96d028d197f2b33bef33f77fbfc01ddf
-
SHA256
51861faa58ed7b42819c9a0ab494bd446434b8b4ccb9285678ec2b796723d219
-
SHA512
d9a85d551827cbd473b8c56d1a5897e2f9d7db12ac663eed253c048281598d2b37bef168540c3d12a35c369eeb97be4aa64f49bbd4abc0ab4d9f1ae2022c3507
-
SSDEEP
1536:tF4JhtbieQXqcWtx/GQBXbt2jVno25Ged/EyjbjRQAgRJJ5R2xOSC4BG:+t+eQXRWDuQBXbteoK7dveDrJ5wxO344
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51861faa58ed7b42819c9a0ab494bd446434b8b4ccb9285678ec2b796723d219
Files
-
51861faa58ed7b42819c9a0ab494bd446434b8b4ccb9285678ec2b796723d219.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ