Static task
static1
Behavioral task
behavioral1
Sample
b0ae40ba1eb689e36c58149705a50b0f6e883e7b0af7fdf5eb78d3d05d77a500.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b0ae40ba1eb689e36c58149705a50b0f6e883e7b0af7fdf5eb78d3d05d77a500.exe
Resource
win10v2004-20230915-en
General
-
Target
b0ae40ba1eb689e36c58149705a50b0f6e883e7b0af7fdf5eb78d3d05d77a500
-
Size
5.1MB
-
MD5
eed84bb078944e0e901265b2d234dc47
-
SHA1
1fdd6fa3e17b1ee79f756d5a4661a7f688b9db6e
-
SHA256
b0ae40ba1eb689e36c58149705a50b0f6e883e7b0af7fdf5eb78d3d05d77a500
-
SHA512
b65069ff8cf9d0c8aa209ef4bbbc468b6eb0f2005d38febf2092e97f55d884413589127faafbc3f372da3502495b256627b4e7d4d866b15714626e296d33b08f
-
SSDEEP
24576:Un2nsiMjxg38loEFn3SQ8grsdV96opzPmhFi8:UCEF8ggZt8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0ae40ba1eb689e36c58149705a50b0f6e883e7b0af7fdf5eb78d3d05d77a500
Files
-
b0ae40ba1eb689e36c58149705a50b0f6e883e7b0af7fdf5eb78d3d05d77a500.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5.1MB - Virtual size: 26.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE