Static task
static1
Behavioral task
behavioral1
Sample
5f3049b004208496d66dbf09dfeaedc0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5f3049b004208496d66dbf09dfeaedc0N.exe
Resource
win10v2004-20240802-en
General
-
Target
5f3049b004208496d66dbf09dfeaedc0N.exe
-
Size
155KB
-
MD5
5f3049b004208496d66dbf09dfeaedc0
-
SHA1
13b4e1e0f1228f9b2003cb7349cd7951ff755025
-
SHA256
f38d93a47606277d369763353a11508a7b2a08643535b9e981345ef7cd420145
-
SHA512
032058d61a82efd7241ae71c4ece2f3b46b85ead1a79f94e9746b9e328c61b8bd16b6f3a32e6b6c3c93348946f01bdcbe29e845e5d1cad0ea3c493b6538394d3
-
SSDEEP
1536:W7ZhA7dABJJZENTBWv36QTW7JJZENTBWv36V7ZhA7dABJJZENTBWv36QTW7JJZEu:6e76BtEevetEevGe76BtEevetEev7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f3049b004208496d66dbf09dfeaedc0N.exe
Files
-
5f3049b004208496d66dbf09dfeaedc0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ