Static task
static1
Behavioral task
behavioral1
Sample
7bb94e763ac79c923eb26c1d2eba050a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7bb94e763ac79c923eb26c1d2eba050a.exe
Resource
win10v2004-20231215-en
General
-
Target
7bb94e763ac79c923eb26c1d2eba050a
-
Size
418KB
-
MD5
7bb94e763ac79c923eb26c1d2eba050a
-
SHA1
78a05e4fb1c8b264cc958f35b9dd6a40d6819fd2
-
SHA256
52de50aa120185a0483739b29c3491811ff634fd17a883f4822f2413cc0adb70
-
SHA512
4fb8396c9f962429320f85d430d2130a684826c37e2cad5d5a2961c0814c17b4c7f09da296c25ff1e9bd2f91df6fd13f0ea0faac1fd22befb0e5855b299d9d3f
-
SSDEEP
6144:vjBaLH9zIA/WU58/p9LY+152OaP6wqmdY4d3Vc3+Coo5hK+SI6hnbEkjwTeMkzVW:vtaLdcA+q87GCuA+CduI6hRwCvY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7bb94e763ac79c923eb26c1d2eba050a
Files
-
7bb94e763ac79c923eb26c1d2eba050a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ