Static task
static1
Behavioral task
behavioral1
Sample
b87796978bc07bcc2674f8e663a1651f97e2b890225a61ec10336e203ddd85c3.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b87796978bc07bcc2674f8e663a1651f97e2b890225a61ec10336e203ddd85c3.exe
Resource
win10v2004-20230915-en
General
-
Target
b87796978bc07bcc2674f8e663a1651f97e2b890225a61ec10336e203ddd85c3
-
Size
33KB
-
MD5
a036a0c35c39c078333cf5676b26f274
-
SHA1
78da8de9587618098d65e20eda7a7ab804762fa4
-
SHA256
b87796978bc07bcc2674f8e663a1651f97e2b890225a61ec10336e203ddd85c3
-
SHA512
5a79073ceb8c14f66ffccae5cd6a2fe4d302b19924aeb43726f0442b43eabd9be28a452e7fc7d97ed3f249618dddb437dbbdfafc76507160364d7c7fd452da5c
-
SSDEEP
768:AU+Vxr1x5cE9Fl5pz8dc2G0QKFANeuXaunr:AUsrz8dOBN9aunr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b87796978bc07bcc2674f8e663a1651f97e2b890225a61ec10336e203ddd85c3
Files
-
b87796978bc07bcc2674f8e663a1651f97e2b890225a61ec10336e203ddd85c3.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE