Static task
static1
Behavioral task
behavioral1
Sample
a76d89f2057a89e127d3f351e8e30e23.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
a76d89f2057a89e127d3f351e8e30e23.exe
Resource
win10v2004-20240226-en
General
-
Target
a76d89f2057a89e127d3f351e8e30e23.bin
-
Size
184KB
-
MD5
a76d89f2057a89e127d3f351e8e30e23
-
SHA1
8d2ac2a47a929992ab3cb65a7b395b21fc716d3b
-
SHA256
9bdb5bf3d9538ad7f007a85a7fe2db9c3a9e9fd9f9003425763375b28545c8ea
-
SHA512
820722895617cf6bf78df2bd5e952f329b0a78edf35b7c99f36987f653dfa03e8df05151cb56d6a70831d5d42cf110f8a509084e85efb756777f5fe5bbcff970
-
SSDEEP
3072:Kp2romuxTOAEAmjNMhcrC8YMEXKMTxXldk7xKDCeZylPvpFW:KpKoPDEAiM6rC8a1BPylPvpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a76d89f2057a89e127d3f351e8e30e23.bin
Files
-
a76d89f2057a89e127d3f351e8e30e23.bin.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ