Static task
static1
Behavioral task
behavioral1
Sample
b659b1a618e5590c04c8bc26e1338e5c.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b659b1a618e5590c04c8bc26e1338e5c.exe
Resource
win10v2004-20230221-en
General
-
Target
b659b1a618e5590c04c8bc26e1338e5c.exe
-
Size
10KB
-
MD5
b659b1a618e5590c04c8bc26e1338e5c
-
SHA1
2eed13f71a8896343bfea08b23ff60ec8b6ec524
-
SHA256
3b8b14c2716ec32988eb537411eb26dfe8842dab96496d5c080d9a7fe7f283b9
-
SHA512
bb55ab83c0f99d7bd10a82b6df6eca698eaf30622d973a691df0762a45e8dcbc1bf84033c3239f3b37f61ad3e458995d747015b29379ede8fc6a624202d77947
-
SSDEEP
192:S+K2dXheZufNAs8dnFWzhDevaB8nhIMqUM6gMSEHRVCmmypL71dqETltleb:0WhoQsFWxevaqKWSExVCmmypL71dqETW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b659b1a618e5590c04c8bc26e1338e5c.exe
Files
-
b659b1a618e5590c04c8bc26e1338e5c.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ