Static task
static1
Behavioral task
behavioral1
Sample
02bfb7863cc0f07550c5eafecf222a16.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
02bfb7863cc0f07550c5eafecf222a16.exe
Resource
win10v2004-20231215-en
General
-
Target
02bfb7863cc0f07550c5eafecf222a16
-
Size
385KB
-
MD5
02bfb7863cc0f07550c5eafecf222a16
-
SHA1
a6b83bed0ae0bf4c3f6ed088849d92ce0da58afb
-
SHA256
ae28d2a27ff00f0652dc19c466d4ca42e2b88c2f8c0529e055497d64182bf7b8
-
SHA512
83e627a3796cebd030cacd2d2c8e6c1d21fb1f4c38ab130eb435f61b2c8732ba6f940909354ed54b2803101a4e89e1ac98a6e55a22ecd8a0a98f191e56951f2b
-
SSDEEP
6144:XYUSLtw4JzYHWkVKxYS0VvuGAitULxuu5141oatIYeDhiAUGCLm96FB:I9LtNzLks50JTULAu5dwwDvga96FB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02bfb7863cc0f07550c5eafecf222a16
Files
-
02bfb7863cc0f07550c5eafecf222a16.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ