Static task
static1
Behavioral task
behavioral1
Sample
b7ba1c037de6801f69a5a68d1bf5e7bb.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b7ba1c037de6801f69a5a68d1bf5e7bb.exe
Resource
win10v2004-20230220-en
General
-
Target
b7ba1c037de6801f69a5a68d1bf5e7bb
-
Size
29KB
-
MD5
b7ba1c037de6801f69a5a68d1bf5e7bb
-
SHA1
31abd270a973fdad798cd15826b3c7d0955d2451
-
SHA256
a0ea1a7a87990ca8915015981e5fea45fc7b17e6b2096a7d3da1170ae805d742
-
SHA512
e77f1f291797ecf1c4514bd7ea04bbf26ddb508d62b0916380b556db5d252c4887f4afeb279da724d68e6fabd927e24f98d99d70524f63ea3e6cfaef9048c8fe
-
SSDEEP
768:nj7ryNDNVLHuvP4G6wej9FUENm4buMvND4l3QoE6hJK:j7eNDNVLHSL4buMNk3QW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7ba1c037de6801f69a5a68d1bf5e7bb
Files
-
b7ba1c037de6801f69a5a68d1bf5e7bb.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ