Static task
static1
Behavioral task
behavioral1
Sample
b5d265096b79a046877e8069b4f0f9948b49b8db3b2967371e10ca5f8d8855ae.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b5d265096b79a046877e8069b4f0f9948b49b8db3b2967371e10ca5f8d8855ae.exe
Resource
win10v2004-20240221-en
General
-
Target
b5d265096b79a046877e8069b4f0f9948b49b8db3b2967371e10ca5f8d8855ae
-
Size
10.6MB
-
MD5
2f4667b9a389e91f9bfdbdb5e400d703
-
SHA1
0acbe0f7358c0f53a7d427ca919a16c7dd12e908
-
SHA256
b5d265096b79a046877e8069b4f0f9948b49b8db3b2967371e10ca5f8d8855ae
-
SHA512
41eec26b9f7c5345d17b154196d8c2b705a9086ce0f3cfeaa587cdc3a26e30a88a0af90af0ca6e54c0db97b4838696d55c5541b3cca96540b3df8307b68edf30
-
SSDEEP
196608:gkeCT3rE8blQabAxLDoj4878Sx209LOv6Yhc1GShD9IJjc:Z7E8B7Ux3in78SxOFhc1GID9IK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5d265096b79a046877e8069b4f0f9948b49b8db3b2967371e10ca5f8d8855ae
Files
-
b5d265096b79a046877e8069b4f0f9948b49b8db3b2967371e10ca5f8d8855ae.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE