Static task
static1
Behavioral task
behavioral1
Sample
5b478e7b16dbd47960b8aa00d2dcae6467406733fe2eb5bcc0e3d1c05af0e173.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5b478e7b16dbd47960b8aa00d2dcae6467406733fe2eb5bcc0e3d1c05af0e173.exe
Resource
win10v2004-20240802-en
General
-
Target
5b478e7b16dbd47960b8aa00d2dcae6467406733fe2eb5bcc0e3d1c05af0e173
-
Size
4KB
-
MD5
575910147887b0fdd0bd5e0f50f50df1
-
SHA1
0317f2ce31b46c5a3916291faa472a78059916e1
-
SHA256
5b478e7b16dbd47960b8aa00d2dcae6467406733fe2eb5bcc0e3d1c05af0e173
-
SHA512
5491a699a996d20a7e54f351e88dcb684fb906b24e92570bc4d2e1095b978a6d785f9a0495e11c1b931cf4ac95861f4f2e6cc47aac8b1a167aa29836dafbae10
-
SSDEEP
48:6Ym2tqxZ8RxeOAEFJ+cV4MKe2z/fvqBH3uul1+hzqXSfbNtm:RlxvNVx9CfvkpXktzNt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b478e7b16dbd47960b8aa00d2dcae6467406733fe2eb5bcc0e3d1c05af0e173
Files
-
5b478e7b16dbd47960b8aa00d2dcae6467406733fe2eb5bcc0e3d1c05af0e173.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ