Static task
static1
Behavioral task
behavioral1
Sample
5b2e6dd48d956df7283b6c6c1527d3bfe31c802b32085bebbda88308cdaaf26e.exe
Resource
win7-20240903-en
General
-
Target
5b2e6dd48d956df7283b6c6c1527d3bfe31c802b32085bebbda88308cdaaf26e
-
Size
880KB
-
MD5
bfb1e912b7914ca7f64d375479118066
-
SHA1
9a9da9f064b89a5d38d1482778bcbbb5684b44a6
-
SHA256
5b2e6dd48d956df7283b6c6c1527d3bfe31c802b32085bebbda88308cdaaf26e
-
SHA512
3abdb0acce0693e0c20b431f391fb3d2cbc7f72404bf014045c3d8ac54a14fc827880cf67832a993b74eb045762f784a5b8c60451176425b1faeca8313dae8f8
-
SSDEEP
12288:XYA6tgpBhpj670qFNGrVmWKybvjIVbg/okXUM3O1b13gCQDL5IxNbToBfATE5:X4gFpu7dNgXRvZ5n3O1R45+oBfATE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 5b2e6dd48d956df7283b6c6c1527d3bfe31c802b32085bebbda88308cdaaf26e
Files
-
5b2e6dd48d956df7283b6c6c1527d3bfe31c802b32085bebbda88308cdaaf26e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 718KB - Virtual size: 718KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ