Static task
static1
Behavioral task
behavioral1
Sample
5eefaa8cee9b35f6784253abff5e82e0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5eefaa8cee9b35f6784253abff5e82e0N.exe
Resource
win10v2004-20240709-en
General
-
Target
5eefaa8cee9b35f6784253abff5e82e0N.exe
-
Size
6.2MB
-
MD5
5eefaa8cee9b35f6784253abff5e82e0
-
SHA1
684c1b8b0be4fa0ba9aa03d1a4caeb2d545aac23
-
SHA256
59ef93e9ad627af4e9da33e4a426cd92c6ae4f10ac02867844540e79f8906f0a
-
SHA512
746fa048db4142fa3c052d7bc09c31e9333a39537d7dad42df3b11e1b29aa4dd7970a6204477f784d209eca0ccf59896315884c84f1d5737a30fe302f8048dd1
-
SSDEEP
98304:sdNJQkrcElBjgzZWHXR0FGpTdkNUUqBWaXo3uI+gmmdyw4FcGhyKAszB1+CvKbR6:sdvQnElhTH1TIaX8NL4+Gp5vKaQQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5eefaa8cee9b35f6784253abff5e82e0N.exe
Files
-
5eefaa8cee9b35f6784253abff5e82e0N.exe.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 5.1MB - Virtual size: 22.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pnpyzxfa Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nrnhbhxk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE