Static task
static1
Behavioral task
behavioral1
Sample
5d17ba6d6e3f6d866cd6ec43fde07603d8d99ba89220e66db218b60934e03dca.exe
Resource
win7-20240903-en
General
-
Target
5d17ba6d6e3f6d866cd6ec43fde07603d8d99ba89220e66db218b60934e03dca
-
Size
179KB
-
MD5
91fbab1f0cc56706e5721646f07a5162
-
SHA1
8b513324ad0a237c1e15477ce7e08291e82f1f8a
-
SHA256
5d17ba6d6e3f6d866cd6ec43fde07603d8d99ba89220e66db218b60934e03dca
-
SHA512
f691e7cc808ad9198175887da1a48a4af2fadee1cdd24a19f0ce3555f1c034d89995f35e985f064af60eece730df7ef479ba708a1d7b35d8776ade5d134a75f4
-
SSDEEP
3072:PvaY46tGNttyJQ7KRQ1Gny0is1iygSw01IZ1ymklBF5TjZqMNl:p46tGdyjR3gSZ1IZ1yjrvl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d17ba6d6e3f6d866cd6ec43fde07603d8d99ba89220e66db218b60934e03dca
Files
-
5d17ba6d6e3f6d866cd6ec43fde07603d8d99ba89220e66db218b60934e03dca.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE