Static task
static1
Behavioral task
behavioral1
Sample
b2952a282144c042f368121f3d991630.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
b2952a282144c042f368121f3d991630.exe
Resource
win10v2004-20231020-en
General
-
Target
b2952a282144c042f368121f3d991630.exe
-
Size
399KB
-
MD5
b2952a282144c042f368121f3d991630
-
SHA1
1c5d07dcc869d0667a6225202b4f87380cc9de67
-
SHA256
bc3ce9adeb97d068e11f11fe6219ff29fd6e17ed2e5c175a19bbd5071fc32358
-
SHA512
db781e7a874e9d3c2d565dc4760e8ad0b013b1e78332e430590d638afa34aed1d160e22db8200807ddaacd8d38c356f2f922318ca319527a1f33c85e1329bc8c
-
SSDEEP
12288:cp/lcW+rMQCUIJF8Fb0RP3Wq8argJcKKkQP5:cr+Jdt0RP3Wq8argJcKKkQh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2952a282144c042f368121f3d991630.exe
Files
-
b2952a282144c042f368121f3d991630.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 346KB - Virtual size: 349KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 1KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE