Static task
static1
Behavioral task
behavioral1
Sample
b5ce93c71e05a39951837c20aa86476a.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b5ce93c71e05a39951837c20aa86476a.exe
Resource
win10v2004-20240226-en
General
-
Target
b5ce93c71e05a39951837c20aa86476a
-
Size
27KB
-
MD5
b5ce93c71e05a39951837c20aa86476a
-
SHA1
c9a1e42da8a66624d34f5b64dc945d380a4c946c
-
SHA256
7ddc6e2b3221fc1cf8fa9db8ccfc6406d2c79f89b183ed9819fece49de77a704
-
SHA512
1f06fe783dbb0f4f3855bf0d01d9758b75987c2aa2a66d38be716a4e99eedc90c9050659a168ee455aed4fe39c4d835da3d97cb6432e7a3679ae5abcb03ca338
-
SSDEEP
768:RJF7FwJLtr5CQKmtsDlW0MNV9EBKlMjnt+1C36c9n:hFwdt8Q9sDE0kQBL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5ce93c71e05a39951837c20aa86476a
Files
-
b5ce93c71e05a39951837c20aa86476a.exe windows:4 windows x86 arch:x86
3d98884013f55c5f50425a1d4370a928
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
ExitProcess
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
FreeLibrary
WriteFile
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE