Static task
static1
Behavioral task
behavioral1
Sample
5b5bd4617499e52a28dfecf42da3e47723df32b6adfe4ec49da5ab86c900f4dbN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5b5bd4617499e52a28dfecf42da3e47723df32b6adfe4ec49da5ab86c900f4dbN.exe
Resource
win10v2004-20241007-en
General
-
Target
5b5bd4617499e52a28dfecf42da3e47723df32b6adfe4ec49da5ab86c900f4dbN
-
Size
79KB
-
MD5
b36a4aebe3e26fb21f059c12c8fc62c0
-
SHA1
606840cbdd57bc574596fb08adacfce46850b37b
-
SHA256
5b5bd4617499e52a28dfecf42da3e47723df32b6adfe4ec49da5ab86c900f4db
-
SHA512
2a96af860b02898665e0bf656289e7a1241b72d8468297be79a6b3951b737d1b74fdd7d8c002bda98611c9795da256478f3bc6cab042f198a2ec8cc38e0c8fcb
-
SSDEEP
768:WdcR8hXNTolNFpE2xwGtaRlC7aNndDUMLsHSekaFPTO9/1H5UiXdnhgdwQU3bIEW:/R8nTowGCl1/B4TyXZrI1jHJZrR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 5b5bd4617499e52a28dfecf42da3e47723df32b6adfe4ec49da5ab86c900f4dbN
Files
-
5b5bd4617499e52a28dfecf42da3e47723df32b6adfe4ec49da5ab86c900f4dbN.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ