Static task
static1
Behavioral task
behavioral1
Sample
f5b63900e6dc731c77ca6278a9726dc0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
f5b63900e6dc731c77ca6278a9726dc0N.exe
Resource
win10v2004-20240802-en
General
-
Target
f5b63900e6dc731c77ca6278a9726dc0N.exe
-
Size
41KB
-
MD5
f5b63900e6dc731c77ca6278a9726dc0
-
SHA1
66eee04fe82ff3adc4f63f36ddd5c0caea3954be
-
SHA256
8cac1bdd90bdd108b49ad2169aeecd8b8b4a694f1114fc54d0f3c9aeeb5b52d1
-
SHA512
25d51606d5cdda1bd8c1cdd363baca015c9089c65767a1fecc7bd217c84d3cd89bc75fb1cb2ec1c2c2b835795613f9ef48d04a5b5d3e658962a300e9302a51ba
-
SSDEEP
768:MeMc5VwWt1jDkbXdnTOyQxHFO+IxX2P5LIbbcPYir2lAqcdF0i09Cy:Mq5VwWDjDkdTRqHFOn8tIbbeYiuZIFSz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5b63900e6dc731c77ca6278a9726dc0N.exe
Files
-
f5b63900e6dc731c77ca6278a9726dc0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
59k9omvq Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
h092qibt Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6134wxwo Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE