Static task
static1
Behavioral task
behavioral1
Sample
c5063a0e265e2827622234922c807fa0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c5063a0e265e2827622234922c807fa0N.exe
Resource
win10v2004-20240802-en
General
-
Target
c5063a0e265e2827622234922c807fa0N
-
Size
70KB
-
MD5
c5063a0e265e2827622234922c807fa0
-
SHA1
863b59ca82136556444c95101d8862a6341fb9f3
-
SHA256
6d8cff05166b009911c73fa8de51c18c6434c4f3390c7570f7e89acb6a2eddd1
-
SHA512
205b453eb4a97d2fe56ed59d3cfbeca0233caf1b51dfeef1b3be76df4df3a8d89e19c18dfbf92f42d890a32fbafb46be0875794f6a7ec4ff265fe6f7d033d13f
-
SSDEEP
768:EOUWtMYkEOW16YRm/CSEAemLTl0eJpigKqk58sCuSfWV/cXMscAybZAhfmNPMP8:9U9YkETRm/CQTN7igW58kSASMHp7NPM0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5063a0e265e2827622234922c807fa0N
Files
-
c5063a0e265e2827622234922c807fa0N.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ