Static task
static1
Behavioral task
behavioral1
Sample
5b99f8f50fa80b3a168dc6dd315167c0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5b99f8f50fa80b3a168dc6dd315167c0N.exe
Resource
win10v2004-20240802-en
General
-
Target
5b99f8f50fa80b3a168dc6dd315167c0N
-
Size
314KB
-
MD5
5b99f8f50fa80b3a168dc6dd315167c0
-
SHA1
a02b557925b66c4708fd4eef5652471d594e2e97
-
SHA256
1b416b92ac7f5841a387dee53d7493fb23ed838dc9ba36d96dfcd96ae3bf80c5
-
SHA512
c2d51dd2752de886fb4951b3b6ed16280399f263f249e0a86dacaf1de075dc9c01f9d0f2ec2e0bccd0d2965145611d59ef891e2721f2976893f84b75024bc637
-
SSDEEP
6144:zJFzjKA8e+9pyvmX+XqERA45Y0bJEm+Gbp5XTBlwMSbe9tJVF4nML82Cue5e2b:zJFKXyvba0JDNEm/5jBlG+7MMLjCPZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b99f8f50fa80b3a168dc6dd315167c0N
Files
-
5b99f8f50fa80b3a168dc6dd315167c0N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ