Static task
static1
Behavioral task
behavioral1
Sample
c5d16e57200519e46b4ac29fa06274d9f79d241ee6b95c3e122cef605d2eb813.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c5d16e57200519e46b4ac29fa06274d9f79d241ee6b95c3e122cef605d2eb813.exe
Resource
win10v2004-20240802-en
General
-
Target
c5d16e57200519e46b4ac29fa06274d9f79d241ee6b95c3e122cef605d2eb813
-
Size
72KB
-
MD5
29dabd98fb5d62a11d88b29e4936fd16
-
SHA1
ef83e858ba50beb332efd9c2d3cc2dff5e3dfcee
-
SHA256
c5d16e57200519e46b4ac29fa06274d9f79d241ee6b95c3e122cef605d2eb813
-
SHA512
2902063bc9ceaf8f102dc86d070919ecf15fe016d65b1d74227c6e75948db94e3c7cfd837e8d152911933958bddc4f14e3650b29b9ae74da114a0bcd83a0a565
-
SSDEEP
768:bA/Jw8a8UzcHSa9z15TYpXr3Lfq0vXGlWS4fo+VT1Mb/1H58hU9UiEb/KEiEixVD:38AcHpzLYhN/OH4JVT1yHPgUN3QivEtA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5d16e57200519e46b4ac29fa06274d9f79d241ee6b95c3e122cef605d2eb813
Files
-
c5d16e57200519e46b4ac29fa06274d9f79d241ee6b95c3e122cef605d2eb813.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ