Static task
static1
Behavioral task
behavioral1
Sample
c5f1650970d15dddf104a77fc51c37634c9b01a0a670a5847c96d438b418b671.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
c5f1650970d15dddf104a77fc51c37634c9b01a0a670a5847c96d438b418b671.exe
Resource
win10v2004-20240508-en
General
-
Target
c5f1650970d15dddf104a77fc51c37634c9b01a0a670a5847c96d438b418b671
-
Size
90KB
-
MD5
345667a263eb5273134f9870bad54ecc
-
SHA1
7d971e23503aee5386e29a9d464f9b9b027d71ba
-
SHA256
c5f1650970d15dddf104a77fc51c37634c9b01a0a670a5847c96d438b418b671
-
SHA512
41e771c1bbf7d4a97e2a97a10d0424cfd03d8c1d755afb3c3e9666b2ca53205e390c22458b53a7aacec7c2e2f1f1b028f95d16b6b2f8960bfca4fb9c7106ee1a
-
SSDEEP
1536:zs+5rbvi9i7fwbzA29LIOq3c5Atup/q4bjw9LlSkU7IXAmfOOQ/4BrGTI5Yxj:zTnokCcODAoAD9RSkrbU/4kT0Yxj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5f1650970d15dddf104a77fc51c37634c9b01a0a670a5847c96d438b418b671
Files
-
c5f1650970d15dddf104a77fc51c37634c9b01a0a670a5847c96d438b418b671.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.pdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ