Static task
static1
Behavioral task
behavioral1
Sample
b78b5626ab216367d97a47976f7ec8806aab24d6bba077bd9bab9cb22d727d79.exe
Resource
win10v2004-20231023-en
General
-
Target
b78b5626ab216367d97a47976f7ec8806aab24d6bba077bd9bab9cb22d727d79
-
Size
4.8MB
-
MD5
79fa82409bf37e5a2105d03aea3c8b8f
-
SHA1
06bbacaf518ab1b412d5345c6041154b8ff6e005
-
SHA256
b78b5626ab216367d97a47976f7ec8806aab24d6bba077bd9bab9cb22d727d79
-
SHA512
331f592e822b8cd2f69ed650e0a573b94845d0c5fee87a67622ae8b473d97dbfedbdefbd09302dbf0da9e7f78901e1276c9e9da87e618585bbdcff0b2dac015a
-
SSDEEP
98304:RoMd9WqCSk4EGkBijqVx8g2E33MyyLF1qbVA4ZVJc1GlE:e6KSkukgj4BBaLFCrVJc1Gu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b78b5626ab216367d97a47976f7ec8806aab24d6bba077bd9bab9cb22d727d79
Files
-
b78b5626ab216367d97a47976f7ec8806aab24d6bba077bd9bab9cb22d727d79.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ