Static task
static1
Behavioral task
behavioral1
Sample
b9607191f1818d4d7a16394380c668c9bafdd05332e9a3a66505839a68b6a348.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b9607191f1818d4d7a16394380c668c9bafdd05332e9a3a66505839a68b6a348.exe
Resource
win10v2004-20230220-en
General
-
Target
b9607191f1818d4d7a16394380c668c9bafdd05332e9a3a66505839a68b6a348
-
Size
2.5MB
-
MD5
6c3a6396971e19b2878e69cb1dca3708
-
SHA1
70fb586fb3c1375bdefcaa6ab567585b3da66e99
-
SHA256
b9607191f1818d4d7a16394380c668c9bafdd05332e9a3a66505839a68b6a348
-
SHA512
36531bb45c7fadd1d8112152aa78e23a4867d540fbd0e3d683973695cc8450487acc7407a2c32f4e77041cf59a692b313d2e6e6dbb854a1948035fe510284ec4
-
SSDEEP
49152:JNpVvcu0KtK161FJ2FIbc0/ViKFovHCslrAfd0FSuil1:Xzvr0KKwFsIbjiKeiSAF0wf3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9607191f1818d4d7a16394380c668c9bafdd05332e9a3a66505839a68b6a348
Files
-
b9607191f1818d4d7a16394380c668c9bafdd05332e9a3a66505839a68b6a348.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ