Static task
static1
Behavioral task
behavioral1
Sample
b5d1db7b894cb3fd0aff9e65fd505166.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b5d1db7b894cb3fd0aff9e65fd505166.exe
Resource
win10v2004-20240226-en
General
-
Target
b5d1db7b894cb3fd0aff9e65fd505166
-
Size
166KB
-
MD5
b5d1db7b894cb3fd0aff9e65fd505166
-
SHA1
c7e6ad03abf17105c81a97f0a29322c222dd45ab
-
SHA256
58d447e694925d9c94e5af158543131de06b5a08bd5e27850eeb1d96cee5deb2
-
SHA512
1281f2e1131dd8d7bb16554d4e0619a3bdf118da42f51997517a721bcbac845156a2228333ccfe32b875109469f2baf8ed099426bf21ab67207715c9e9cb8003
-
SSDEEP
3072:OZU+YFeSO5BDxsD3QRMrudOIl3pNTIz2xrtdOttWmBBKgKZyFWnJ00:opY/zQRe+OIlXTIz2xrtct0mBBKgKZyk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5d1db7b894cb3fd0aff9e65fd505166
Files
-
b5d1db7b894cb3fd0aff9e65fd505166.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 365KB - Virtual size: 820KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE