Static task
static1
Behavioral task
behavioral1
Sample
5b1ccf8d4885eacf1a2ffc1944b775677dc1176488770ba3752c0105d94dd8dbN.exe
Resource
win7-20240903-en
General
-
Target
5b1ccf8d4885eacf1a2ffc1944b775677dc1176488770ba3752c0105d94dd8dbN
-
Size
230KB
-
MD5
ecfc2ec04dbdf68c5ec1e767d43800d0
-
SHA1
7471362973811b5341ffb44c58ef8d191374b02f
-
SHA256
5b1ccf8d4885eacf1a2ffc1944b775677dc1176488770ba3752c0105d94dd8db
-
SHA512
a8b53821a198bd8292d5b38606c11fccc258675970cba22123aed9e72547dfc44c35a8907af098fb72611b41fa3cb6cd63aed0547115c420bb2493311e896082
-
SSDEEP
3072:ymb3NkkiQ3mdBjFo73PYP1lri3KoSV31x4xLjBeG+v:n3C9BRo7MlrWKo+lxKy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b1ccf8d4885eacf1a2ffc1944b775677dc1176488770ba3752c0105d94dd8dbN
Files
-
5b1ccf8d4885eacf1a2ffc1944b775677dc1176488770ba3752c0105d94dd8dbN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ