Static task
static1
Behavioral task
behavioral1
Sample
5df1833a4afa830517dada003e159d50N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5df1833a4afa830517dada003e159d50N.exe
Resource
win10v2004-20240802-en
General
-
Target
5df1833a4afa830517dada003e159d50N
-
Size
79KB
-
MD5
5df1833a4afa830517dada003e159d50
-
SHA1
2359065a6bc7a8d16bf853360ba860184f7c2f8b
-
SHA256
46bcb938cc6eeff1fc00fc06461afd11f7587105c6dd204d23da16a070088f9e
-
SHA512
bb88fb1bbd61ad7d9243c5d3772e65e5a680b360b8c29c3b06357043c49ee82b3162e54ed8abf1447b0143e42f1d3beb567aa08e56453caf5a1d0288d5226a51
-
SSDEEP
1536:86RAo0ej2d6rnJwwvlNlIUBvsI7hrhEh9cpDN/qhAvP3OChhW4dI0h4HCIzhUvTm:xAo1lOwvlNlXBvsI7hrhEh9cpDN/qhA4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5df1833a4afa830517dada003e159d50N
Files
-
5df1833a4afa830517dada003e159d50N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE