Static task
static1
Behavioral task
behavioral1
Sample
5bf6fe04d03e1aa735168f8cf8d96c7f9cf51ad310a3500b45395a6e4067299cN.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
5bf6fe04d03e1aa735168f8cf8d96c7f9cf51ad310a3500b45395a6e4067299cN.exe
Resource
win10v2004-20241007-en
General
-
Target
5bf6fe04d03e1aa735168f8cf8d96c7f9cf51ad310a3500b45395a6e4067299cN
-
Size
227KB
-
MD5
87082042c5b3fd1354a6813c7e39eb70
-
SHA1
2c19e6f23a618537522d92b30df4b9c7bcc6cc4a
-
SHA256
5bf6fe04d03e1aa735168f8cf8d96c7f9cf51ad310a3500b45395a6e4067299c
-
SHA512
3eb80f309112924fa39e1afaab13e1af8b58d9e08d1fd207b12fc9ad53ca4051bb8a854bac8cfab7ec8caee0713a180bdaebe66d1deceb3c30ee018059d3f96f
-
SSDEEP
3072:0iORn4gsYzn+HpiUuo4SlJZiLV2RgOrdJQcs4VTkg6Mad2oS3h3s2dxzjkJlcKXS:zJFzjKA8em4hkChTCmGThRXS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bf6fe04d03e1aa735168f8cf8d96c7f9cf51ad310a3500b45395a6e4067299cN
Files
-
5bf6fe04d03e1aa735168f8cf8d96c7f9cf51ad310a3500b45395a6e4067299cN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ