Static task
static1
Behavioral task
behavioral1
Sample
d5523927ee24ff87cffc1a93d84a91a6875f6f44fec383e77f14492f83123943N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d5523927ee24ff87cffc1a93d84a91a6875f6f44fec383e77f14492f83123943N.exe
Resource
win10v2004-20241007-en
General
-
Target
d5523927ee24ff87cffc1a93d84a91a6875f6f44fec383e77f14492f83123943N
-
Size
154KB
-
MD5
1bc90a3b2a57004d704b2a73a3510930
-
SHA1
bdf967ecfbbadb562b9c7183a1b0b26108f9b55f
-
SHA256
d5523927ee24ff87cffc1a93d84a91a6875f6f44fec383e77f14492f83123943
-
SHA512
b78bd4e2372fb3ef646696d52a15b86ae797236e468c2633c4e97a0bee4f411f873776c87d0f0b3f1f81d90a9c8a0fc71dc7e786604caa435e20ce818db2968f
-
SSDEEP
1536:yxqjQ+P04wsZLnDrCT9iwGNQGEDHBzVp+hx1biKbXDUV2sMHgOzigZpSEXEyx:zr8WDrCwwOQzBzVp0kV1oiQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5523927ee24ff87cffc1a93d84a91a6875f6f44fec383e77f14492f83123943N
Files
-
d5523927ee24ff87cffc1a93d84a91a6875f6f44fec383e77f14492f83123943N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 42KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ