Static task
static1
Behavioral task
behavioral1
Sample
5a94f63791007994e92183c12f69ffde13d60b49868f15f344b042c8acc125aa.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5a94f63791007994e92183c12f69ffde13d60b49868f15f344b042c8acc125aa.exe
Resource
win10v2004-20240802-en
General
-
Target
5a94f63791007994e92183c12f69ffde13d60b49868f15f344b042c8acc125aa
-
Size
299KB
-
MD5
bbe7e8c5c9ba98396aa0e993c573e432
-
SHA1
05e5374621c17a95fcc4ccdfcc876bcfcd224cec
-
SHA256
5a94f63791007994e92183c12f69ffde13d60b49868f15f344b042c8acc125aa
-
SHA512
aa3ac33554eb0e93b638f8dfea276b24524ad74648fe2580b0b64bea1e9a5f7d6bd051f8b8f2d4d4676e116012a0cc38747f98148b225400572e1ef375bc6f1f
-
SSDEEP
6144:zJFzjKA8e+9pyvmX+XqERA45Y0bJEm+GbpPdIH4DJLJFmZG31YqR:zJFKXyvba0JDNEm/P0cJLJFmw31Yi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a94f63791007994e92183c12f69ffde13d60b49868f15f344b042c8acc125aa
Files
-
5a94f63791007994e92183c12f69ffde13d60b49868f15f344b042c8acc125aa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ