Static task
static1
Behavioral task
behavioral1
Sample
b.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
b.exe
Resource
win10v2004-20230703-en
General
-
Target
b.exe
-
Size
913KB
-
MD5
dead71dbbf27238f7e57cd1cccdd220c
-
SHA1
45785d2625c3f080a25c6c43cc4011139bd4382c
-
SHA256
ff8f72c7803281fae00a1a539dcf167036b0b1add5e2b29bd13d0cbc980f1bd2
-
SHA512
84181a86ecbc0f59dc241e2dbd0378a95f702b3f21e52175fc09c95ce885831454c47d09c0c768bd5b566483c004551a2352543ed20c9970dbdac9388ee071f8
-
SSDEEP
12288:A8Yco+gunv179en24e8GMUWwjs20/+W8pfgEANr4KQFB:AzZunt79en2sG2I/E+9pf3AFv0B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b.exe
Files
-
b.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 321KB - Virtual size: 321KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ