Static task
static1
Behavioral task
behavioral1
Sample
0f5854e7430dafea778ee9527e6d0e23276953ee16bfa8b1bcfe39ca3dbd1b2a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f5854e7430dafea778ee9527e6d0e23276953ee16bfa8b1bcfe39ca3dbd1b2a.exe
Resource
win10v2004-20240802-en
General
-
Target
0f5854e7430dafea778ee9527e6d0e23276953ee16bfa8b1bcfe39ca3dbd1b2a
-
Size
5.3MB
-
MD5
550fc4f6e170a8c11a5ecfacbbf5b923
-
SHA1
f9714387a428c2a67f6b1ec15d6d3e7122dbc62a
-
SHA256
0f5854e7430dafea778ee9527e6d0e23276953ee16bfa8b1bcfe39ca3dbd1b2a
-
SHA512
e27624c4bf845fc1cacfca0638fa9f143da54dea1fe4110e4f849e40ba5f8d691005b3dbda90c72355af35afa944b88fc7411ce4302e90065cb7e402d6678a9f
-
SSDEEP
6144:dbl4mOQ4vaKxpXvUIJ8DVE64Rtc6CO5aXLxC7hD6xIsL5n0vdBJ2U/g+p+:omOXvaKxpXPF+Lo7oLivDJdVo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f5854e7430dafea778ee9527e6d0e23276953ee16bfa8b1bcfe39ca3dbd1b2a
Files
-
0f5854e7430dafea778ee9527e6d0e23276953ee16bfa8b1bcfe39ca3dbd1b2a.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
T-VMP Size: - Virtual size: 633KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
T-VMP Size: - Virtual size: 319KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
T-VMP Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: 552KB - Virtual size: 549KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ