Static task
static1
Behavioral task
behavioral1
Sample
b878a102be7e16fb25e2add37ec27483.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b878a102be7e16fb25e2add37ec27483.exe
Resource
win10v2004-20230220-en
General
-
Target
b878a102be7e16fb25e2add37ec27483.exe
-
Size
33KB
-
MD5
b878a102be7e16fb25e2add37ec27483
-
SHA1
cdac3c46100b47ad65ffe4b3716ae671804c491f
-
SHA256
44b2e6749b401fffd705180073c3e649c8458d445915470caf41a7ca5a312020
-
SHA512
f63f7d44ed99a855e60f06bc2b39e995c443fce47623c9e1aba6f21da2582e872d6750d3fa0dbd1637641a22ebb553f5d673a19ca20c76329d9ff9c1e8c6e69f
-
SSDEEP
384:ktetPbVS5/OcLmDqWPT+1o1dvtey3ZZtoFIrB+pJz/4r2xmzV777F7/m0N+GC430:kWcYCW1vXf2Dz/S73pxEvbq0yC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b878a102be7e16fb25e2add37ec27483.exe
Files
-
b878a102be7e16fb25e2add37ec27483.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ