Static task
static1
Behavioral task
behavioral1
Sample
f5bfe919bec4fda8d283ec519afd4280N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5bfe919bec4fda8d283ec519afd4280N.exe
Resource
win10v2004-20240802-en
General
-
Target
f5bfe919bec4fda8d283ec519afd4280N.exe
-
Size
71KB
-
MD5
f5bfe919bec4fda8d283ec519afd4280
-
SHA1
a385659f6fef0eb792806ad63e8244ab58881f01
-
SHA256
1c8fc5def79aa40f916b2f1b2c666f53f17d88af04eb4cc93f6d8cf2933afd4f
-
SHA512
345d1b19405d9ac738a45bb673dea82286038bafd8b13fc4ddcaaa28d6dd785d201523e78c5806a211306d2da32d9e160f4c751f6b5b12c24bad72234ed187af
-
SSDEEP
1536:YCkEYN1jhiaDMSlYRiYjRyAjgOgEB1J8h+GLiBRQGDbEyRCRRRoR4Rk:eBNwS4NB1J8YGL4eYEy032ya
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5bfe919bec4fda8d283ec519afd4280N.exe
Files
-
f5bfe919bec4fda8d283ec519afd4280N.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajelhf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ