Static task
static1
Behavioral task
behavioral1
Sample
b864125645abce2ccaa52a42c5b102e9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
b864125645abce2ccaa52a42c5b102e9.exe
Resource
win10v2004-20231215-en
General
-
Target
b864125645abce2ccaa52a42c5b102e9
-
Size
2.5MB
-
MD5
b864125645abce2ccaa52a42c5b102e9
-
SHA1
c913f38265001c6279da3ef535813b5df35045a1
-
SHA256
4fde03ac4d137326a2e6a932bb1a142bc562132a58ca6f7aa0ed0b12cb22b2a9
-
SHA512
1dd2ddeb667581821c0f3e15d5dc373f50eb3208aa45f1a82ec87dcc073c78a88055287933e6278e5c756cab82cc74837bc7a2bc6f45e6d5edfcbf0f69bcdd1a
-
SSDEEP
768:t7iEg1+NidXmlP2YAaenXQ3WMpbViFq4/4M:t7j752oenXTMpZcq4/4M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b864125645abce2ccaa52a42c5b102e9
Files
-
b864125645abce2ccaa52a42c5b102e9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
zCOudfzz Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
waecTbTU Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE