Static task
static1
Behavioral task
behavioral1
Sample
b5f1cec3d4f5600d742fc0671e4ae874.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
b5f1cec3d4f5600d742fc0671e4ae874.exe
Resource
win10v2004-20231222-en
General
-
Target
b5f1cec3d4f5600d742fc0671e4ae874.bin
-
Size
45KB
-
MD5
b5f1cec3d4f5600d742fc0671e4ae874
-
SHA1
31cd1d3fc2496c3c266d5aa1e634d843d95d0cee
-
SHA256
47cf5766560768789a7b85578d208783040c8deff9c513a197b1da836aa48e86
-
SHA512
ba36a639b7177ba920960ac81e02961b85c6212d5326d51b38084e814b4e56ad28ff5db4fb833083fe59638bd79da9ec8d7d1e79889e89d13bbbe35fef0fe382
-
SSDEEP
768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MocBv:qmbhXDmjr5MOtEvwDpj5cDtKkQZQSp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5f1cec3d4f5600d742fc0671e4ae874.bin
Files
-
b5f1cec3d4f5600d742fc0671e4ae874.bin.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
bUItIFMf Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
QNhjSkbP Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE