Static task
static1
Behavioral task
behavioral1
Sample
5baf45c17b968504c1b188074128bd40268ed229e22b9ac4982ab6f1f7df557dN.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
5baf45c17b968504c1b188074128bd40268ed229e22b9ac4982ab6f1f7df557dN.exe
Resource
win10v2004-20241007-en
General
-
Target
5baf45c17b968504c1b188074128bd40268ed229e22b9ac4982ab6f1f7df557dN
-
Size
96KB
-
MD5
323d6b33f22c6a7e86dae73427964cb0
-
SHA1
070d112e17ca5af391105c71455ced2a917c3a66
-
SHA256
5baf45c17b968504c1b188074128bd40268ed229e22b9ac4982ab6f1f7df557d
-
SHA512
9da4b6466c76be0f174a3a6d90edab681ca699d6c0c9a37c8cadc0bcd4f475bf9801eb1bd6ad2739e822c5718d6b209567e738a91603d1c0d0f7ad14ceefcd93
-
SSDEEP
1536:WhlHqKt1/ZnV6GOpP6f3xCTrVUqW/6gn6Qlzu/p2tS74S7V+5pUMv84WMRw8Dkqq:Y0Kt1xnkGOl6fYrVUqW/6gnzspi64Spv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5baf45c17b968504c1b188074128bd40268ed229e22b9ac4982ab6f1f7df557dN
Files
-
5baf45c17b968504c1b188074128bd40268ed229e22b9ac4982ab6f1f7df557dN.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ