Static task
static1
Behavioral task
behavioral1
Sample
c5ea1f71330c20bc7f3fabb97779d28d4bf59f94d01838bc53dbb31f799be465.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
c5ea1f71330c20bc7f3fabb97779d28d4bf59f94d01838bc53dbb31f799be465.exe
Resource
win10v2004-20240508-en
General
-
Target
c5ea1f71330c20bc7f3fabb97779d28d4bf59f94d01838bc53dbb31f799be465
-
Size
93KB
-
MD5
de3951b51feef664704cd4f4a1aa99ae
-
SHA1
9de9cc345c32a4057489159dea864f4310e09203
-
SHA256
c5ea1f71330c20bc7f3fabb97779d28d4bf59f94d01838bc53dbb31f799be465
-
SHA512
59c2f5bde6efab67ba6566e698319caf8de54e8f3e222cd30d4d2c0da0ace9f2129f9b2578ac634f830dccc15c98560be85dc0744fbf12a31eeb326f1473be85
-
SSDEEP
1536:8bk0U+VUpLSteVKSu9pgyA3Hvd5aloHsRQWRkRLJzeLD9N0iQGRNQR8RyV+32rR:8YFrpLP29pgyA3H6reWSJdEN0s4WE+3K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5ea1f71330c20bc7f3fabb97779d28d4bf59f94d01838bc53dbb31f799be465
Files
-
c5ea1f71330c20bc7f3fabb97779d28d4bf59f94d01838bc53dbb31f799be465.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pdata Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ