Static task
static1
Behavioral task
behavioral1
Sample
a5fc899cdfe1bc73c0be4802704bc1b0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a5fc899cdfe1bc73c0be4802704bc1b0N.exe
Resource
win10v2004-20240709-en
General
-
Target
a5fc899cdfe1bc73c0be4802704bc1b0N.exe
-
Size
4KB
-
MD5
a5fc899cdfe1bc73c0be4802704bc1b0
-
SHA1
24ea6631796e66cefa6b5955ae1f604bb2aa167f
-
SHA256
a3a333f9a2add7c4e2d1a81bf5a0157d136b438f78252a16a9c59995654e4a38
-
SHA512
8d31115c3b7fdd2a731dd3ae149893a9abca41d53824d1ddd5e8ddb6b5381b28c2b5f308ea70ecedb11121ff4baa3a279450a63872bc967e8931c5f3be716f8e
-
SSDEEP
96:LZIdSLQPZARC3dCE8Y0Jw5NL6EVwHHKg2:dswdRCNCE8YPWowHHK7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5fc899cdfe1bc73c0be4802704bc1b0N.exe
Files
-
a5fc899cdfe1bc73c0be4802704bc1b0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
1695vskq Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
y737gpel Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
c780addf Size: 576B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE