Static task
static1
Behavioral task
behavioral1
Sample
5ef9b7f5199b653ed6c39c01b96ef7f11a9ae6d3b9dd832b59c796d525b8f775N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5ef9b7f5199b653ed6c39c01b96ef7f11a9ae6d3b9dd832b59c796d525b8f775N.exe
Resource
win10v2004-20241007-en
General
-
Target
5ef9b7f5199b653ed6c39c01b96ef7f11a9ae6d3b9dd832b59c796d525b8f775N
-
Size
128KB
-
MD5
b9ddd7b27f5269cc1de6f7bf32794520
-
SHA1
eb899239c53c1702020361ae47fc313bca9d9b04
-
SHA256
5ef9b7f5199b653ed6c39c01b96ef7f11a9ae6d3b9dd832b59c796d525b8f775
-
SHA512
fd9e15090234f5d587b5f0b456b58c5c8db3039c8efb95178f97824e5407526438fcf2eeb887e91b331933041a9e8b975b39ec86e6d441af164c0d8094299524
-
SSDEEP
3072:Ah68Rg0010Q6RBp/lh6BTkK8Qr5+ViKGe7Yfs0a0Uoi7:AhDg0kniBleTkK9cViK4fs0lk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ef9b7f5199b653ed6c39c01b96ef7f11a9ae6d3b9dd832b59c796d525b8f775N
Files
-
5ef9b7f5199b653ed6c39c01b96ef7f11a9ae6d3b9dd832b59c796d525b8f775N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfcd Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ