Static task
static1
Behavioral task
behavioral1
Sample
b5b315989eae4b21296b3eba316adacc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b5b315989eae4b21296b3eba316adacc.exe
Resource
win10v2004-20240226-en
General
-
Target
b5b315989eae4b21296b3eba316adacc
-
Size
1.1MB
-
MD5
b5b315989eae4b21296b3eba316adacc
-
SHA1
13a2285e6bef3f10c08409f24ede4e375f169096
-
SHA256
04c2b5aac9821d569ab86b0758bef20350043c565c0b7cee65c1ddfedb40bdf8
-
SHA512
4bd9ca9621132f1d14344b0869d46b692f5340881c991ce37c17400de50d1d40d72b0b9f30f8bb22a5d64df26153b035cfec6d1ae9d9c84de3ed287a1204f1c1
-
SSDEEP
24576:qGwsWy/7Cab83RI3i0Iw+76n9cmnYiMSCMKrUDj:qOnDKI3iXwSw9Bn4Sqij
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5b315989eae4b21296b3eba316adacc
Files
-
b5b315989eae4b21296b3eba316adacc.exe windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 274KB - Virtual size: 616KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 960KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
utapblzf Size: 789KB - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cjrdmpir Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE