Static task
static1
Behavioral task
behavioral1
Sample
5d4a826339a82f06c646f0e61d889d30N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5d4a826339a82f06c646f0e61d889d30N.exe
Resource
win10v2004-20240802-en
General
-
Target
5d4a826339a82f06c646f0e61d889d30N
-
Size
488KB
-
MD5
5d4a826339a82f06c646f0e61d889d30
-
SHA1
6a38b9db251fb1843d8ed2e5198ef34be8169524
-
SHA256
3722406a58f62dbba9adc7c273cd447ba787cdbede94b2dbd2f13e8a210703cd
-
SHA512
ca9f86d8d92392082844a208349e0c90cef2f03185a7a69b0b062e461ad4395345f51e2b6e67b14955fb5ebf8734aa04ee950d7a4ebf877636a20caebe41235e
-
SSDEEP
12288:V/Mv/MP/Mx/M7/Mx/M4/MpBE/Mk/M2/M1:VcK2O2HIBEd7M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d4a826339a82f06c646f0e61d889d30N
Files
-
5d4a826339a82f06c646f0e61d889d30N.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 52KB - Virtual size: 6.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE